VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Feb 27, 2016· Updated Jun 17, 2026

CVE-2015-7261

CVE-2015-7261

Description

The FTP service in QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station before 2.0.1, has hardcoded credentials, which makes it easier for remote attackers to obtain access via a session on TCP port 21.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Qnap/Iartist Lite2 versions
    cpe:2.3:a:qnap:iartist_lite:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:qnap:iartist_lite:*:*:*:*:*:*:*:*range: <=1.4.53.1
    • (no CPE)range: <1.4.54
  • Qnap/Signage Station2 versions
    cpe:2.3:a:qnap:signage_station:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:qnap:signage_station:*:*:*:*:*:*:*:*range: <=2.0
    • (no CPE)range: <2.0.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.