CVE-2015-7261 The FTP service in QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station before 2.0.1, has hardcoded credentials, which makes it easier for remote attackers to obtain access via a....
CriticalCVSS 9.8
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The FTP service in QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station before 2.0.1, has hardcoded credentials, which makes it easier for remote attackers to obtain access via a session on TCP port 21.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qnap iartist lite | <= 1.4.53.1 | No fix listed |
| qnap signage station | <= 2.0 | No fix listed |
References
- VU#444472 third-party-advisory us-government-resource