CVE-2022-27593DeadBolt Ransomware
Known exploited — QNAP Photo Station Externally Controlled Reference Vulnerability
CISA confirmed this vulnerability is used in real attacks on 08.09.2022. Remediation deadline for US federal agencies: 29.09.2022.
Required action: Apply updates per vendor instructions. https://www.qnap.com/en/security-advisory/qsa-22-24; https://nvd.nist.gov/vuln/detail/CVE-2022-27593
Description
An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an attacker to modify system files. We have already fixed the vulnerability in the following versions: QTS 5.0.1: Photo Station 6.1.2 and later QTS 5.0.0/4.5.x: Photo Station 6.0.22 and later QTS 4.3.6: Photo Station 5.7.18 and later QTS 4.3.3: Photo Station 5.4.15 and later QTS 4.2.6: Photo Station 5.2.14 and later
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| QNAP Systems Inc. | Photo Station | unspecified – < 6.1.2 |
References and patches
- https://www.qnap.com/en/security-advisory/qsa-22-24 Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-27593 US Government Resource
CPE matches (NVD) (5)
cpe:2.3:a:qnap:photo_station:*:*:*:*:*:*:*:*< 5.2.14cpe:2.3:a:qnap:photo_station:*:*:*:*:*:*:*:*< 5.4.15cpe:2.3:a:qnap:photo_station:*:*:*:*:*:*:*:*< 5.7.18cpe:2.3:a:qnap:photo_station:*:*:*:*:*:*:*:*< 6.0.22cpe:2.3:a:qnap:photo_station:*:*:*:*:*:*:*:*< 6.1.2