HIGH🇬🇧 English

CVE-2015-7262

CVSS 7.5v3.0pub. 2016-02-27upd. 2026-05-06

QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station before 2.0.1, allows remote authenticated users to gain privileges by registering an executable file, and then waiting for this file to be run in a privileged context after a reboot.

oryginał EN
CVSS Vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Qnap Iartist Lite

    APP
    Qnap
    ≤ 1.4.53.1

  • Qnap Signage Station

    APP
    Qnap
    ≤ 2.0
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2015-7261CRITICAL9.8ten sam produkt

The FTP service in QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station before 2.0.1, has...

CVE-2015-6022HIGH8.8ten sam produkt

Unrestricted file upload vulnerability in QNAP Signage Station before 2.0.1 allows remote authenticated users ...

CVE-2022-27593CRITICAL10.0⚠ KEVten sam vendor

An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Ph...

CVE-2021-28799CRITICAL10.0⚠ KEVten sam vendor

An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 (Hybrid Backup Sync...

CVE-2020-2509CRITICAL9.8⚠ KEVten sam vendor

A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerabil...