{"id":"CVE-2019-7193","kind":"vulnerability","aliases":["CVE-2019-7193"],"related":[],"title":"qnap qts: This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system","description":"This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest versions.","summary":"QNAP QTS, the operating system on QNAP network-attached storage devices, has an input validation flaw that lets remote attackers inject code. The sources say attackers have exploited it in the wild and that it has been used in ransomware campaigns.","severity":"critical","cvss":10.0,"epss":0.14367,"exploited":true,"exploited_at":"2022-06-08T00:00:00+00:00","products":[{"name":"QNAP QTS","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"qnap qts","fixed":[],"affected":"= 4.3.6.0895","ecosystem":"vendor"},{"name":"qnap qts","fixed":[],"affected":"= 4.3.6.0907","ecosystem":"vendor"},{"name":"qnap qts","fixed":[],"affected":"= 4.3.6.0923","ecosystem":"vendor"},{"name":"qnap qts","fixed":[],"affected":"= 4.3.6.0944","ecosystem":"vendor"},{"name":"qnap qts","fixed":[],"affected":"= 4.3.6.0959","ecosystem":"vendor"},{"name":"qnap qts","fixed":[],"affected":"= 4.3.6.0979","ecosystem":"vendor"},{"name":"qnap qts","fixed":[],"affected":"= 4.3.6.0993","ecosystem":"vendor"},{"name":"qnap qts","fixed":[],"affected":"= 4.3.6.1013","ecosystem":"vendor"},{"name":"qnap qts","fixed":[],"affected":"= 4.3.6.1033","ecosystem":"vendor"},{"name":"qnap qts","fixed":[],"affected":"= 4.4.1.0948","ecosystem":"vendor"},{"name":"qnap qts","fixed":[],"affected":"= 4.4.1.0949","ecosystem":"vendor"},{"name":"qnap qts","fixed":[],"affected":"= 4.4.1.0978","ecosystem":"vendor"},{"name":"qnap qts","fixed":[],"affected":"= 4.4.1.0998","ecosystem":"vendor"},{"name":"qnap qts","fixed":[],"affected":"= 4.4.1.0999","ecosystem":"vendor"},{"name":"qnap qts","fixed":[],"affected":"= 4.4.1.1031","ecosystem":"vendor"},{"name":"qnap qts","fixed":[],"affected":"= 4.4.1.1033","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","nas","qnap","qts","ransomware","self-hosted","vendor"],"not_affected_if":["managed-hosting"],"how_to_check":"Check the QTS version in the web admin under Control Panel > System > Firmware Update; compare it against the fixed build in the QNAP advisory.","fix":"Update QTS to the fixed build listed in the QNAP security advisory, following CISA's instruction to apply vendor updates.","status":"open","published_at":"2019-12-05T17:15:13+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:12:51+00:00","updated_at":"2026-10-23T22:29:04+00:00","category":"vendor","confidence":0.6,"triage":{"at":"2026-10-23T21:12:51Z","model":"claude-haiku-5-5","output":{"fix":"Update QTS to the fixed build listed in the QNAP security advisory, following CISA's instruction to apply vendor updates.\nunknown","reach":"internet","impact":"high","summary":"QNAP QTS, the operating system on QNAP network-attached storage devices, has an input validation flaw that lets remote attackers inject code. The sources say attackers have exploited it in the wild and that it has been used in ransomware campaigns.","category":"vendor","who_cares":["qnap","qts","nas","self-hosted"],"confidence":0.6,"needs_auth":"no","worst_case":"Remote attacker runs code on the NAS and can reach stored files","analyst_note":"Find the fixed QTS build and affected version range in the QNAP advisory for CVE-2019-7193; the sources give neither.","how_to_check":"Check the QTS version in the web admin under Control Panel > System > Firmware Update; compare it against the fixed build in the QNAP advisory.\nunknown","needs_analyst":true,"not_affected_if":["managed-hosting"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000482,"input_tokens":2816,"output_tokens":400,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2019':19A,22A '-7193':20A,23A 'allow':8A,114C 'arbitrari':13A,119C 'attach':76B 'attack':10A,87B,93B,116C 'campaign':108B 'code':14A,89B,120C 'cve':18A,21A 'devic':78B 'exploit':58B,95B 'fix':125C 'flaw':83B 'host':65B 'improp':4A,110C 'inject':12A,88B,118C 'input':5A,81B,111C 'latest':134C 'let':85B 'nas':59B 'network':75B 'network-attach':74B 'oper':70B 'qnap':1A,24A,26A,28A,30A,32A,34A,36A,38A,40A,42A,44A,46A,48A,50A,52A,54A,56A,60B,67B,73B,128C 'qts':2A,25A,27A,29A,31A,33A,35A,37A,39A,41A,43A,45A,47A,49A,51A,53A,55A,57A,61B,68B,131C 'ransomwar':62B,107B 'recommend':129C 'remot':9A,86B,115C 'say':92B 'self':64B 'self-host':63B 'sourc':91B 'storag':77B 'system':17A,71B,123C 'updat':130C 'use':105B 'valid':6A,82B,112C 'vendor':66B 'version':135C 'vulner':7A,113C,127C 'wild':99B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2019-12-05T17:15:13+00:00","kev":{"dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Known"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2019-7193","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-7193","severity":null,"published_at":"2022-06-08T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T14:39:39+00:00","note":null},{"source":"epss","external_id":"CVE-2019-7193","url":"https://api.first.org/data/v1/epss?cve=CVE-2019-7193","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:45+00:00","fetched_at":"2026-10-23T19:13:45+00:00","note":null},{"source":"nvd","external_id":"CVE-2019-7193","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-7193","severity":null,"published_at":"2019-12-05T17:15:13+00:00","modified_at":"2026-06-17T02:40:14+00:00","first_seen_at":"2026-10-23T22:29:04+00:00","fetched_at":"2026-10-23T22:29:04+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}