ID:5712 - Exploit for Externally Controlled Reference to a Resource in Another Sphere in QNAP QTS and Photo Station - CVE-2019-7195

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to the affected software uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere. A remote attacker can access or modify system files.

Remediation