Vulnerability Intelligence Report
QNAP QTS Improper Input Validation Vulnerability
CVE-2019-7193
This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest versions.
CISA KEV
SSVC: Active Exploitation
Automatable
CVSS Base Score
9.8
CRITICAL
Exploitability:3.9
Impact Score:5.9
EPSS Probability:14.37%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-20 ↗CWE-20 Improper Input Validation
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| qnap | qts | 4.3.6.0895, 4.3.6.0907, 4.3.6.0923, 4.3.6.0944, 4.3.6.0959, 4.3.6.0979, 4.3.6.0993, 4.3.6.1013, 4.3.6.1033, 4.4.1.0948, 4.4.1.0949, 4.4.1.0978, 4.4.1.0998, 4.4.1.0999, 4.4.1.1031, 4.4.1.1033 |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | QNAP Systems, Inc. · Vendor · Taiwan |
| Reserved | 2019-01-29T00:00:00 |
| Published | 2019-12-05T16:22:19 |
| Last Updated | 2025-10-21T23:35:57 |
Community Chatter & Buzz