CVE-2015-7261 in Signage Station
Summary
The FTP service in QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station before 2.0.1, has hardcoded credentials, which makes it easier for remote attackers to obtain access via a session on TCP port 21.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
09/18/2015
Disclosure
02/27/2016
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 81092 | QNAP Signage Station iArtist Lite credentials management | 255 | Not defined | Official fix | CVE-2015-7261 |