Critical severity · published Sep 8, 2022
CVE-2022-27593
DeadBolt Ransomware
RansomwareIn wildKEV
9.1
CVSS
87.9%
EPSS
Yes
On KEV
Description
An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an attacker to modify system files. We have already fixed the vulnerability in the following versions: QTS 5.0.1: Photo Station 6.1.2 and later QTS 5.0.0/4.5.x: Photo Station 6.0.22 and later QTS 4.3.6: Photo Station 5.7.18 and later QTS 4.3.3: Photo Station 5.4.15 and later QTS 4.2.6: Photo Station 5.2.14 and later
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)87.9% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Sep 8, 2022
Federal remediation dueSep 29, 2022
Ransomware campaign useKnown
Affected products
Which versions
PS
Photo Station · QNAP Systems Inc.
before 6.1.2; before 6.0.22; before 6.0.22; before 5.7.18; before 5.4.15; before 5.2.14 · source: vendor, NVD, KEV