CVE-2022-27593
DeadBolt Ransomware
- State
- Published
- Severity
- 10.0 Critical
- Published
- Sep 8, 2022
- Updated
- Oct 21, 2025
- Reserved
- Mar 21, 2022
Description
An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an attacker to modify system files. We have already fixed the vulnerability in the following versions: QTS 5.0.1: Photo Station 6.1.2 and later QTS 5.0.0/4.5.x: Photo Station 6.0.22 and later QTS 4.3.6: Photo Station 5.7.18 and later QTS 4.3.3: Photo Station 5.4.15 and later QTS 4.2.6: Photo Station 5.2.14 and later
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 10.0 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H | qnap |
Weaknesses
- CWE-610 Externally Controlled Reference to a Resource in Another Sphere
Affected Products
| Product | Versions |
|---|---|
Photo StationQNAP Systems Inc. |
|
Photo StationQNAP Systems Inc. |
|
Photo StationQNAP Systems Inc. |
|
Photo StationQNAP Systems Inc. |
|
Photo StationQNAP Systems Inc. |
|
Photo StationQNAP Systems Inc. |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.