Approved changes feed: RSS · Atom

cpe:2.3:a:qnap:signage_station:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorQnap (a402dda4-b7da-50eb-b0f8-700e564ee87d)
ProductSignage Station (ec38a664-5b83-5036-bf7f-2086bbc0bded)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-7262 vulnerable 2026-06-08 05:07:00.264241 Details available
QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station before 2.0.1, allows remote authenticated users to gain privileges by registering an executable file, and then waiting for this file to be run in a privileged context after a reboot.
Published: 2016-02-27T02:00:00.000Z
Updated: 2024-08-06T07:43:46.092Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7261 vulnerable 2026-06-08 05:07:00.263819 Details available
The FTP service in QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station before 2.0.1, has hardcoded credentials, which makes it easier for remote attackers to obtain access via a session on TCP port 21.
Published: 2016-02-27T02:00:00.000Z
Updated: 2024-08-06T07:43:46.167Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6022 vulnerable 2026-06-08 05:06:51.159328 Details available
Unrestricted file upload vulnerability in QNAP Signage Station before 2.0.1 allows remote authenticated users to execute arbitrary code by uploading an executable file, and then accessing this file via an unspecified URL.
Published: 2016-02-27T02:00:00.000Z
Updated: 2024-08-06T07:06:34.966Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.