How many QNAP Photo Station CVEs are in CISA KEV?

Yes — 4 of QNAP Photo Station's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of QNAP Photo Station are affected?

88 distinct QNAP Photo Station versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in QNAP Photo Station CVEs?

QNAP Photo Station's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-80 (Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).

How many critical QNAP Photo Station vulnerabilities are there?

QNAP Photo Station has 6 critical and 5 high-severity CVEs.

What is the average severity of QNAP Photo Station CVEs?

The average CVSS base score across QNAP Photo Station's scored CVEs is 7.0.

QNAP Photo Station Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: QNAP Photo Station vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

QNAP Photo Station Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

QNAP Photo Station has 26 published CVE records since 2014, of which 4 are in CISA's Known Exploited Vulnerabilities catalog and 6 have a known public exploit. The average CVSS base score across scored CVEs is 7.0. Affected platforms include nas, qts, qts 4.2.6, qts 4.3.3, qts 4.3.6, qts 5.0.0.

Severity and exploitation

How the CVSS severity of QNAP Photo Station's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical6

High5

Medium14

Low1

In CISA’s Known Exploited Vulnerabilities catalog

4 of QNAP Photo Station's CVEs are confirmed exploited in the wild.

Public exploits

6 of QNAP Photo Station's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every QNAP Photo Station version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

< 5.2.111 CVE
< 5.4.101 CVE
< 5.7.121 CVE
< 5.7.131 CVE
< 6.0.121 CVE
versions 5.2.7 and earlier for QTS 4.2.x1 CVE
versions 5.4.3 and earlier for QTS 4.3.x1 CVE

Version ranges

< 5.2.114 CVEs
6.4.0 <= v < 6.4.34 CVEs
6.4.x <= v < 6.4.3 ( 2024/07/12 )4 CVEs
< 5.4.9

Common weakness types

The CWE weakness categories most often found in QNAP Photo Station CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many QNAP Photo Station CVEs were published each year.

2014

2018

2019

2020

2021

2022

2024

Other QNAP products

Browse vulnerabilities for other products by QNAP.

QTS325 CVEs QuTS hero253 CVEs qutscloud77 CVEs Qsync Central69 CVEs File Station 558 CVEs file station54 CVEs Video Station21 CVEs QuMagie15 CVEs

All QNAP vulnerabilities

Frequently asked questions

Common questions about QNAP Photo Station vulnerabilities.

How many CVEs does QNAP Photo Station have?: QNAP Photo Station has 26 published CVE records since 2014.
How many QNAP Photo Station CVEs are in CISA KEV?: Yes — 4 of QNAP Photo Station's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for QNAP Photo Station vulnerabilities?: Yes — 6 of QNAP Photo Station's CVEs have a known public exploit.
Which versions of QNAP Photo Station are affected?: 88 distinct QNAP Photo Station versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in QNAP Photo Station CVEs?: QNAP Photo Station's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-80 (Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).
How many critical QNAP Photo Station vulnerabilities are there?: QNAP Photo Station has 6 critical and 5 high-severity CVEs.
What is the average severity of QNAP Photo Station CVEs?: The average CVSS base score across QNAP Photo Station's scored CVEs is 7.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track QNAP Photo Station vulnerabilities

Get an alert for each new QNAP Photo Station CVE, with AI-written analysis and remediation steps.

Create an account See pricing