qnap music station

Name: qnap music station
Brand: qnap

productUS

cpe:2.3:a:qnap:music_station:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

by severity

4critical4high5medium0low

updated 2026-10-28

vulnerabilities (13)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-36197US	high8.8	18.5% (97th)	—	5.2.10	2021-05-13	3 versions
CVE-2018-0729US	critical9.8	2.34% (84th)	—	5.1.11	2019-12-04	4 versions
CVE-2018-19950US	critical9.8	2.06% (81st)	—	5.3.11	2020-11-02	3 versions
CVE-2018-0718US	critical9.8	1.68% (77th)	—	no fix	2018-09-14	≤ 5.1.2
CVE-2017-13069US	critical9.8	1.68% (77th)	—	no fix	2017-10-06	2 versions
CVE-2019-7185US	medium4.8	1.46% (73rd)	—	5.1.11	2019-12-05	3 versions
CVE-2018-19952US	high7.5	1.27% (70th)	—	5.1.13	2020-11-02	3 versions
CVE-2023-45038US	high8.8	1.24% (69th)	—	5.4.0	2024-09-06	5.0.0 → 5.4.0
CVE-2020-2494US	medium6.1	0.99% (62nd)	—	5.3.12	2020-12-10	2 versions
CVE-2018-19951US	medium6.1	0.77% (55th)	—	5.2.9	2020-11-02	3 versions
CVE-2023-23366US	medium6.5	0.67% (52nd)	—	5.3.22	2023-10-06	5.3.0 → 5.3.22
CVE-2023-23365US	medium6.5	0.67% (52nd)	—	5.3.22	2023-10-06	5.3.0 → 5.3.22
CVE-2023-39299US	high7.5	0.61% (49th)	—	4.8.11	2023-11-03	3 versions

The flaw types (CWEs) most of these CVEs share.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')4 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-80Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)3 CVEs
CWE-552Files or Directories Accessible to External Parties2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-287Improper Authentication1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.