QNAP
CISA 가 실제 악용을 확인해 등재한 QNAP 제품 취약점입니다. 여기 있다는 것은 이미 공격에 쓰였다는 뜻이고, 없다는 것이 안전하다는 뜻은 아닙니다.
최근 등재
등재일 최신순입니다.
● 실제 악용이 확인됨CVE-2023-47565QNAP VioStor NVR OS Command Injection Vulnerability73.3%높음8.8● 랜섬웨어 캠페인에 사용됨CVE-2022-27593QNAP Photo Station Externally Controlled Reference Vulnerability87.9%심각9.1● 랜섬웨어 캠페인에 사용됨CVE-2019-7192QNAP Photo Station Improper Access Control Vulnerability88.1%심각9.8● 랜섬웨어 캠페인에 사용됨CVE-2019-7193QNAP QTS Improper Input Validation Vulnerability14.4%심각9.8● 랜섬웨어 캠페인에 사용됨CVE-2019-7194QNAP Photo Station Path Traversal Vulnerability83.1%심각9.8● 랜섬웨어 캠페인에 사용됨CVE-2019-7195QNAP Photo Station Path Traversal Vulnerability89.7%심각9.8● 랜섬웨어 캠페인에 사용됨CVE-2018-19949QNAP NAS File Station Command Injection Vulnerability28.4%심각9.8● 랜섬웨어 캠페인에 사용됨CVE-2018-19953QNAP NAS File Station Cross-Site Scripting Vulnerability28.8%보통6.1
등재된 제품
5종
VioStor NVR 1Photo Station 4QTS 1Network Attached Storage (NAS) 4QNAP Network-Attached Storage (NAS) 1
전체 목록
QNAP · 11건
| CVE | 등재일 | 제품 | 취약점 이름 | 악용 확률 | 심각도 | 조치 기한 |
|---|---|---|---|---|---|---|
| CVE-2023-47565 | 2023-12-21 | VioStor NVR | QNAP VioStor NVR OS Command Injection Vulnerability | 73.3% | 높음8.8 | 2024-01-11 |
| CVE-2022-27593 랜섬웨어 악용 | 2022-09-08 | Photo Station | QNAP Photo Station Externally Controlled Reference Vulnerability | 87.9% | 심각9.1 | 2022-09-29 |
| CVE-2019-7192 랜섬웨어 악용 | 2022-06-08 | Photo Station | QNAP Photo Station Improper Access Control Vulnerability | 88.1% | 심각9.8 | 2022-06-22 |
| CVE-2019-7193 랜섬웨어 악용 | 2022-06-08 | QTS | QNAP QTS Improper Input Validation Vulnerability | 14.4% | 심각9.8 | 2022-06-22 |
| CVE-2019-7194 랜섬웨어 악용 | 2022-06-08 | Photo Station | QNAP Photo Station Path Traversal Vulnerability | 83.1% | 심각9.8 | 2022-06-22 |
| CVE-2019-7195 랜섬웨어 악용 | 2022-06-08 | Photo Station | QNAP Photo Station Path Traversal Vulnerability | 89.7% | 심각9.8 | 2022-06-22 |
| CVE-2018-19949 랜섬웨어 악용 | 2022-05-24 | Network Attached Storage (NAS) | QNAP NAS File Station Command Injection Vulnerability | 28.4% | 심각9.8 | 2022-06-14 |
| CVE-2018-19953 랜섬웨어 악용 | 2022-05-24 | Network Attached Storage (NAS) | QNAP NAS File Station Cross-Site Scripting Vulnerability | 28.8% | 보통6.1 | 2022-06-14 |
| CVE-2018-19943 랜섬웨어 악용 | 2022-05-24 | Network Attached Storage (NAS) | QNAP NAS File Station Cross-Site Scripting Vulnerability | 21.5% | 보통5.4 | 2022-06-14 |
| CVE-2020-2509 | 2022-04-11 | QNAP Network-Attached Storage (NAS) | QNAP Network-Attached Storage (NAS) Command Injection Vulnerability | 34.0% | 심각9.8 | 2022-05-02 |
| CVE-2021-28799 랜섬웨어 악용 | 2022-03-31 | Network Attached Storage (NAS) | QNAP NAS Improper Authorization Vulnerability | 78.3% | 심각9.8 | 2022-04-21 |