CVE-2015-6022

High

Published: 27/02/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

An unrestricted file upload vulnerability in QNAP Signage Station before version 2.0.1 allows remote authenticated users to execute arbitrary code by uploading an executable file and then accessing this file via an unspecified URL.

Risk Assessment

This vulnerability poses a risk of executing malicious code on the server, potentially allowing an attacker to gain control over the system.

Recommendation

It is recommended to update QNAP Signage Station to the latest version and implement strict controls over uploaded files to prevent such attacks.

Other vulnerabilities in QNAP Signage Station

CVE-2015-6036High
QNAP Signage Station before 2.0.1 allows remote attackers to bypass authentication, enabling file uploads via a spoofed HTTP request.

Original NVD description (English source)

Unrestricted file upload vulnerability in QNAP Signage Station before 2.0.1 allows remote authenticated users to execute arbitrary code by uploading an executable file, and then accessing this file via an unspecified URL.