CVE-2019-7201

—

CVSS 3.1

7.8 high

EPSS

<1%p26

Published

Dec 4, 2019 (Dec 4, 2019)

Modified

Jun 17, 2026

Description

An unquoted service path vulnerability is reported to affect the service QVssService in QNAP NetBak Replicator. This vulnerability could allow an authorized but non-privileged local user to execute arbitrary code with elevated system privileges. QNAP have already fixed this issue in QNAP NetBak Replicator 4.5.12.1108.

Vendors: qnap
Products: netbak replicator
Weakness: CWE-428
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.