BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more
← CVE Radar

CVE-2022-27593DeadBolt Ransomware

An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an attacker to modify system files. We have already fixed the vulnerability in the following versions: QTS 5.0.1: Photo Station 6.1.2 and later QTS 5.0.0/4.5.x: Photo Station 6.0.22 and later QTS 4.3.6: Photo Station 5.7.18 and later QTS 4.3.3: Photo Station 5.4.15 and later QTS 4.2.6: Photo Station 5.2.14 and later

10.0 CRITICALEPSS 87.90%⚡ Known Exploited (CISA KEV)NVD: Analyzed

OverviewAffected ProductsReferences
NVD CVE.org

Overview

Severity

ScoreSeverityVersionVector String
10.0CRITICAL3.1qnap (CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H
9.1CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

CISA required action

⚡ Known exploited · remediation due Sep 29, 2022

Apply updates per vendor instructions.

Details

CVE ID
CVE-2022-27593
Status
Analyzed
Assigner (CNA)
qnap
Published
Sep 8, 2022
Last modified
2026-06-17 04:37 UTC
Weaknesses
  • CWE-610 · Externally Controlled Reference to a Resource in Another Sphere

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 14:27 UTC.