PoC Index

CVE-2019-7193

KEV RANSOMWAREHIGH 10.0EPSS 14.4%

This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest versions.

CVSS v3.1
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v3.1
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0
10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
14.37% chance of exploitation in the next 30 days, 96th percentile
CISA KEV
added 2022-06-08, used in ransomware campaigns
Published
2019-12-05
Updated
2025-10-21

Proof-of-concept exploits (1)

References

Related