Known Exploited Vulnerabilities September 08, 2022 · CISA KEV Catalog

CVE-2022-27593: QNAP Photo Station Externally Controlled Reference Vulnerability

Certain QNAP NAS running Photo Station with internet exposure contain an externally controlled reference to a resource vulnerability which can allow an attacker to modify system files. This vulnerability was observed being utilized in a Deadbolt ransomware campaign.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2022-27593 QNAP
Related: CVE-2023-47565: QNAP Vio Stor NVR OS Command Injection Vulnerability Known Exploited Vulnerabilities · Dec 21, 2023
CVE-2019-7192: QNAP Photo Station Improper Access Control Vulnerability Known Exploited Vulnerabilities · Jun 08, 2022
CVE-2019-7193: QNAP QTS Improper Input Validation Vulnerability Known Exploited Vulnerabilities · Jun 08, 2022