CVE Catalog
CVE-2015-6036
HighSummary
QNAP Signage Station before 2.0.1 allows remote attackers to bypass authentication, enabling file uploads via a spoofed HTTP request.
Risk Assessment
Attackers can exploit this vulnerability to upload malicious files, potentially leading to system compromise and data loss.
Recommendation
It is recommended to update QNAP Signage Station to version 2.0.1 or later to mitigate this threat.
Other vulnerabilities in QNAP Signage Station
Original NVD description (English source)
QNAP Signage Station before 2.0.1 allows remote attackers to bypass authentication, and consequently upload files, via a spoofed HTTP request.