CVE-2015-6022

Unrestricted file upload vulnerability in QNAP Signage Station before 2.0.1 allows remote authenticated users to execute arbitrary code by uploading an executable file, and then accessing this file via an unspecified URL.

Score

CVSS 3.0 8.8 High

Status

Modified - cret@cert.org

Published

2016-02-27

Last modified

2024-08-06

Affected products

• Signage Station (Qnap)

References

• http://www.kb.cert.org/vuls/id/444472