CVE-2015-7261

Critical

Published: 27/02/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The FTP service in QNAP iArtist Lite before version 1.4.54, as distributed with QNAP Signage Station before version 2.0.1, has hardcoded credentials, making it easier for remote attackers to gain access via a session on TCP port 21.

Risk Assessment

Remote attackers may exploit the hardcoded credentials to gain unauthorized access to the system, potentially leading to serious security breaches.

Recommendation

It is recommended to update the software to the latest version to remove the hardcoded credentials and secure the FTP service.

Original NVD description (English source)

The FTP service in QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station before 2.0.1, has hardcoded credentials, which makes it easier for remote attackers to obtain access via a session on TCP port 21.