Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2022-27593

DeadBolt Ransomware

Published
Last modified
published
Listed in CISA KEV
Fix
Fixed in 6.1.2, 6.0.22, 5.7.18, 5.4.15, 5.2.14
None on Exploit-DB, Metasploit or GitHub

Summary

The vulnerability affects QNAP network-attached storage (NAS) devices running the Photo Station application. If exploited, an attacker could potentially modify system files on the affected device.

Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.

Read the original description

An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an attacker to modify system files. We have already fixed the vulnerability in the following versions: QTS 5.0.1: Photo Station 6.1.2 and later QTS 5.0.0/4.5.x: Photo Station 6.0.22 and later QTS 4.3.6: Photo Station 5.7.18 and later QTS 4.3.3: Photo Station 5.4.15 and later QTS 4.2.6: Photo Station 5.2.14 and later

Timeline

  1. CVE published
  2. Added to CISA KEV

    CISA has evidence of exploitation in the wild

  3. CISA remediation deadline

    Due date for US federal agencies to patch

  4. Record last updated
  5. EPSS reached 10%

    FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

  • QNAP Systems Inc. Photo Station

    From unspecified · fixed in 6.1.2

  • QNAP Systems Inc. Photo Station

    From unspecified · fixed in 6.0.22

  • QNAP Systems Inc. Photo Station

    From unspecified · fixed in 6.0.22

  • QNAP Systems Inc. Photo Station

    From unspecified · fixed in 5.7.18

  • QNAP Systems Inc. Photo Station

    From unspecified · fixed in 5.4.15

  • QNAP Systems Inc. Photo Station

    From unspecified · fixed in 5.2.14

References 1

qnap.com