{"uuid": "82a47c75-5eaa-450a-b524-d26c3591489d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-7192", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/qnap_lfi.rb", "content": "{\"actions\": [{\"description\": \"Download the file at FILEPATH\", \"name\": \"Download\"}], \"aliases\": [], \"arch\": \"\", \"author\": [\"Henry Huang\", \"Redouane NIBOUCHA \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a local file inclusion in QNAP QTS and Photo\\n          Station that allows an unauthenticated attacker to download files from\\n          the QNAP filesystem.\\n\\n          Because the HTTP server runs as root, it is possible to access\\n          sensitive files, such as SSH private keys and password hashes.\\n\\n          This module has been tested on QTS 4.3.3 (unknown Photo Station\\n          version) and QTS 4.3.6 with Photo Station 5.7.9.\", \"disclosure_date\": \"2019-11-25\", \"fullname\": \"auxiliary/gather/qnap_lfi\", \"is_install_path\": true, \"mod_time\": \"2026-04-15 11:57:01 +0000\", \"name\": \"QNAP QTS and Photo Station Local File Inclusion\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/gather/qnap_lfi.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"gather/qnap_lfi\", \"references\": [\"CVE-2019-7192\", \"CVE-2019-7194\", \"CVE-2019-7195\", \"EDB-48531\", \"URL-https://infosecwriteups.com/qnap-pre-auth-root-rce-affecting-450k-devices-on-the-internet-d55488d28a05\", \"URL-https://www.qnap.com/en-us/security-advisory/nas-201911-25\", \"URL-https://github.com/Imanfeng/QNAP-NAS-RCE\", \"ATT&CK-T1003.008\"], \"rport\": 8080, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:20.870651Z"}