CVE-2022-27593—QNAP Photo Station Externally Controlled Reference Vulnerability

漏洞名称

QNAP Photo Station Externally Controlled Reference Vulnerability

描述

Certain QNAP NAS running Photo Station with internet exposure contain an externally controlled reference to a resource vulnerability which can allow an attacker to modify system files. This vulnerability was observed being utilized in a Deadbolt ransomware campaign.

已知用于勒索软件活动吗？

勒索软件状态：

KNOWN

采集行动

Apply updates per vendor instructions.

其他说明

• https://www.qnap.com/en/security-advisory/qsa-22-24
• https://nvd.nist.gov/vuln/detail/CVE-2022-27593

相关 CWE

• CWE-610