CVE-2019-7195
CRITICAL KEV RANSOMWARE NUCLEIQNAP Photo Station - Path Traversal
Title source: llmExploitation Summary
CVE-2019-7195 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added June 8, 2022, with confirmed use in ransomware campaigns.
EIP tracks 2 public exploits from researchers including halilkirazkaya, Henry Huang, including a Metasploit module auxiliary/gather/qnap_lfi.
A Nuclei detection template is also available.
AI-analyzed exploit summary The repository provides a functional proof-of-concept for CVE-2019-7195, a path traversal vulnerability in QNAP Photo Station. The exploit demonstrates how an attacker can access system files (e.g., /etc/passwd) by manipulating file paths in API requests.
Description
This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions.
Exploits (2)
The repository provides a functional proof-of-concept for CVE-2019-7195, a path traversal vulnerability in QNAP Photo Station. The exploit demonstrates how an attacker can access system files (e.g., /etc/passwd) by manipulating file paths in API requests.
This Metasploit module exploits a local file inclusion (LFI) vulnerability in QNAP QTS and Photo Station, allowing unauthenticated attackers to read arbitrary files from the filesystem. It leverages the Photo Station API to traverse directories and retrieve sensitive files like /etc/shadow.
Nuclei Templates (1)
content-length:"580 "http server 1.0"" || http.title:"photo station" || http.title:"qnap"
title="photo station" || title="qnap"
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H