CVE-2022-27593Used in ransomware
QNAP Photo Station
QNAP Photo Station Externally Controlled Reference Vulnerability
What it is
Certain QNAP NAS running Photo Station with internet exposure contain an externally controlled reference to a resource vulnerability which can allow an attacker to modify system files. This vulnerability was observed being utilized in a Deadbolt ransomware campaign.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other QNAP entries on the list
- VioStor NVR QNAP VioStor NVR OS Command Injection Vulnerability CVE-2023-47565 · Dec 21, 2023
- Photo Station QNAP Photo Station Path Traversal Vulnerability CVE-2019-7195 · Jun 8, 2022
- Photo Station QNAP Photo Station Path Traversal Vulnerability CVE-2019-7194 · Jun 8, 2022
- QTS QNAP QTS Improper Input Validation Vulnerability CVE-2019-7193 · Jun 8, 2022
- Photo Station QNAP Photo Station Improper Access Control Vulnerability CVE-2019-7192 · Jun 8, 2022
- Network Attached Storage (NAS) QNAP NAS File Station Cross-Site Scripting Vulnerability CVE-2018-19953 · May 24, 2022