CVE-2022-27593criticalunder attackransomwareCWE-610

CVE-2022-27593: critical vulnerability in QNAP Systems Inc. Photo Station

DeadBolt Ransomware

Published · Updated

Follow this CVE+ Monitor Photo Station

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

95Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 10epss 88%
from disclosure to weapon
Published on NVDSep 8
CISA KEVSep 8
Action required by CISAfederal deadline: 2022-09-29

Apply updates per vendor instructions.

In short

A vulnerability in QNAP NAS Photo Station allows attackers to modify system files by exploiting an improperly controlled file reference, potentially leading to complete system compromise through ransomware deployment.

Technical detail

CWE-610 path traversal/external entity reference vulnerability in Photo Station enables unauthenticated or low-privileged attackers to manipulate system files by crafting malicious requests that bypass access controls; successful exploitation results in arbitrary file modification and ransomware installation on affected QNAP devices across multiple QTS versions.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an attacker to modify system files. We have already fixed the vulnerability in the following versions: QTS 5.0.1: Photo Station 6.1.2 and later QTS 5.0.0/4.5.x: Photo Station 6.0.22 and later QTS 4.3.6: Photo Station 5.7.18 and later QTS 4.3.3: Photo Station 5.4.15 and later QTS 4.2.6: Photo Station 5.2.14 and later
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H
Affected products
QNAP Systems Inc. · Photo Station
Related CVEs — QNAP Systems Inc. Photo Station

In the same product, most dangerous first.

CVE-2023-47562HIGHPhoto StationEPSS 1.1%CVE-2020-2491—Cross-site Scripting Vulnerability in Photo StationEPSS 1.0%CVE-2021-44057HIGHImproper authentication in Photo StationEPSS 0.9%CVE-2018-19956—CVE-2018-19956EPSS 0.9%CVE-2018-19955—CVE-2018-19955EPSS 0.9%CVE-2018-19954—CVE-2018-19954EPSS 0.9%