Read the docs
TI-2019-05101 Aliases CVE-2019-7193GHSA-964w-hfj4-c2g7

Improper input validation in QNAP NAS devices

Priority CRITICAL 100Exploited in the wildCWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.

Summary

This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest versions.

Why it matters now

Exploitation Active In CISA KEV since 2022-06-08CISA due date 2022-06-22Known ransomware use
EPSS 0.14367 96th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Active
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
—QNAP NAS devicesQTS 4.4.0 - QTS 4.4.1: before build 20190918, QTS 4.3.6: before build 20190919—No fix listedCNA
  • QNAP NAS devices Vendor— Affected QTS 4.4.0 - QTS 4.4.1: before build 20190918, QTS 4.3.6: before build 20190919 Fixed in — No fix listed CNA

CPE configurations NVD · 16

CPEVersionsRoleVendor
cpe:2.3:o:qnap:qts:4.3.6.0895:-:*:*:*:*:*:*4.3.6.0895VulnerableQNAP
cpe:2.3:o:qnap:qts:4.3.6.0907:-:*:*:*:*:*:*4.3.6.0907VulnerableQNAP
cpe:2.3:o:qnap:qts:4.3.6.0923:-:*:*:*:*:*:*4.3.6.0923VulnerableQNAP
cpe:2.3:o:qnap:qts:4.3.6.0944:-:*:*:*:*:*:*4.3.6.0944VulnerableQNAP
cpe:2.3:o:qnap:qts:4.3.6.0959:-:*:*:*:*:*:*4.3.6.0959VulnerableQNAP
cpe:2.3:o:qnap:qts:4.3.6.0979:-:*:*:*:*:*:*4.3.6.0979VulnerableQNAP
cpe:2.3:o:qnap:qts:4.3.6.0993:-:*:*:*:*:*:*4.3.6.0993VulnerableQNAP
cpe:2.3:o:qnap:qts:4.3.6.1013:-:*:*:*:*:*:*4.3.6.1013VulnerableQNAP
cpe:2.3:o:qnap:qts:4.3.6.1033:-:*:*:*:*:*:*4.3.6.1033VulnerableQNAP
cpe:2.3:o:qnap:qts:4.4.1.0948:beta:*:*:*:*:*:*4.4.1.0948 betaVulnerableQNAP
  • cpe:2.3:o:qnap:qts:4.3.6.0895:-:*:*:*:*:*:* Versions 4.3.6.0895 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:4.3.6.0907:-:*:*:*:*:*:* Versions 4.3.6.0907 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:4.3.6.0923:-:*:*:*:*:*:* Versions 4.3.6.0923 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:4.3.6.0944:-:*:*:*:*:*:* Versions 4.3.6.0944 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:4.3.6.0959:-:*:*:*:*:*:* Versions 4.3.6.0959 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:4.3.6.0979:-:*:*:*:*:*:* Versions 4.3.6.0979 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:4.3.6.0993:-:*:*:*:*:*:* Versions 4.3.6.0993 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:4.3.6.1013:-:*:*:*:*:*:* Versions 4.3.6.1013 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:4.3.6.1033:-:*:*:*:*:*:* Versions 4.3.6.1033 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:4.4.1.0948:beta:*:*:*:*:*:* Versions 4.4.1.0948 beta Vulnerable ·QNAP
Show 6 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:qnap:qts:4.4.1.0949:beta:*:*:*:*:*:*4.4.1.0949 betaVulnerableQNAP
cpe:2.3:o:qnap:qts:4.4.1.0978:beta_2:*:*:*:*:*:*4.4.1.0978 beta_2VulnerableQNAP
cpe:2.3:o:qnap:qts:4.4.1.0998:beta_3:*:*:*:*:*:*4.4.1.0998 beta_3VulnerableQNAP
cpe:2.3:o:qnap:qts:4.4.1.0999:beta_3:*:*:*:*:*:*4.4.1.0999 beta_3VulnerableQNAP
cpe:2.3:o:qnap:qts:4.4.1.1031:beta_4:*:*:*:*:*:*4.4.1.1031 beta_4VulnerableQNAP
cpe:2.3:o:qnap:qts:4.4.1.1033:beta_4:*:*:*:*:*:*4.4.1.1033 beta_4VulnerableQNAP
  • cpe:2.3:o:qnap:qts:4.4.1.0949:beta:*:*:*:*:*:* Versions 4.4.1.0949 beta Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:4.4.1.0978:beta_2:*:*:*:*:*:* Versions 4.4.1.0978 beta_2 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:4.4.1.0998:beta_3:*:*:*:*:*:* Versions 4.4.1.0998 beta_3 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:4.4.1.0999:beta_3:*:*:*:*:*:* Versions 4.4.1.0999 beta_3 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:4.4.1.1031:beta_4:*:*:*:*:*:* Versions 4.4.1.1031 beta_4 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:4.4.1.1033:beta_4:*:*:*:*:*:* Versions 4.4.1.1033 beta_4 Vulnerable ·QNAP

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2022-06-08 Added to CISA KEV
  2. 2026-10-02 Threatist record created from CVE-2019-7193
  3. 2026-10-03 Alias added: GHSA-964w-hfj4-c2g7

References

Exploit 1

Advisory 1

  • TI-2020-02221 Command Injection Vulnerability in QTS and QuTS hero KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-14137 Improper input validation in QNAP QTS KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-14131 Cross-site scripting in QNAP QTS KEVCVSS 3.1HIGH 8.0
  • TI-2018-14141 Cross-site scripting in QNAP QTS KEVCVSS 3.1MEDIUM 6.1
See all 282 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences