CVE-2015-6022

8.8 highEPSS 3.1%

Unrestricted file upload vulnerability in QNAP Signage Station before 2.0.1 allows remote authenticated users to execute arbitrary code by uploading an executable file, and then accessing this file via an unspecified URL.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 3.1% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
Published: 2016-02-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

qnap:signage_station

References

http://www.kb.cert.org/vuls/id/444472
http://www.kb.cert.org/vuls/id/444472

Check your stack JSON