CVE-2015-7261

Name of the Vulnerable Software and Affected Versions QNAP Signage Station versions prior to 2.0.1 QNAP iArtist Lite versions prior to 1.4.54

Description The issue exists due to hardcoded registration data in the FTP service of the affected software. This allows a remote attacker to gain access to protected information through a session on TCP port 21.

Recommendations For QNAP Signage Station versions prior to 2.0.1, update to version 2.0.1 or later. For QNAP iArtist Lite versions prior to 1.4.54, update to version 1.4.54 or later.