CVE-2015-7261

The FTP service in QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station before 2.0.1, has hardcoded credentials, which makes it easier for remote attackers to obtain access via a session on TCP port 21.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cret@cert.org

Published

2016-02-27

Last modified

2024-08-06

Weaknesses

CWE-255

Affected products

• Iartist Lite (Qnap)
• Signage Station (Qnap)

References

• http://www.kb.cert.org/vuls/id/444472