All CVE records
CVE-2022-27593 — QNAP Photo Station Externally Controlled Reference Vulnerability
Known ransomware use
CISA KEV listed
Added September 8, 2022 Remediate by September 29, 2022
Description
Certain QNAP NAS running Photo Station with internet exposure contain an externally controlled reference to a resource vulnerability which can allow an attacker to modify system files. This vulnerability was observed being utilized in a Deadbolt ransomware campaign.
Required action
Apply updates per vendor instructions.
Notes
https://www.qnap.com/en/security-advisory/qsa-22-24; https://nvd.nist.gov/vuln/detail/CVE-2022-27593
Need help remediating this vulnerability?
Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.