CVE-2015-6036

QNAP Signage Station before 2.0.1 allows remote attackers to bypass authentication, and consequently upload files, via a spoofed HTTP request.

Score

CVSS 3.0 7.5 High

Status

Modified - cret@cert.org

Published

2016-02-27

Last modified

2024-08-06

Affected products

• Sinage Station (Qnap)

References

• http://www.kb.cert.org/vuls/id/444472