← CVE Intelligence

CVE-2022-27593

DeadBolt Ransomware PUBLISHED

Description (CNA)

An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an attacker to modify system files. We have already fixed the vulnerability in the following versions: QTS 5.0.1: Photo Station 6.1.2 and later QTS 5.0.0/4.5.x: Photo Station 6.0.22 and later QTS 4.3.6: Photo Station 5.7.18 and later QTS 4.3.3: Photo Station 5.4.15 and later QTS 4.2.6: Photo Station 5.2.14 and later

Affected (CNA)

Vendor / productVersions
QNAP Systems Inc. / Photo Stationaffected unspecified before 6.1.2
QNAP Systems Inc. / Photo Stationaffected unspecified before 6.0.22
QNAP Systems Inc. / Photo Stationaffected unspecified before 6.0.22
QNAP Systems Inc. / Photo Stationaffected unspecified before 5.7.18
QNAP Systems Inc. / Photo Stationaffected unspecified before 5.4.15
QNAP Systems Inc. / Photo Stationaffected unspecified before 5.2.14

CWE

CWE-610

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.