Read the docs
TI-2022-10581 Aliases CVE-2022-27593GHSA-c84w-pfmp-9cxg

DeadBolt Ransomware

Priority CRITICAL 100Exploited in the wildCWE-610Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an attacker to modify system files. We have already fixed the vulnerability in the following versions: QTS 5.0.1: Photo Station 6.1.2 and later QTS 5.0.0/4.5.x: Photo Station 6.0.22 and later QTS 4.3.6: Photo Station 5.7.18 and later QTS 4.3.3: Photo Station 5.4.15 and later QTS 4.2.6: Photo Station 5.2.14 and later

Why it matters now

Exploitation Active In CISA KEV since 2022-09-08CISA due date 2022-09-29Known ransomware use
EPSS 0.87908 99th percentileScored 2026-11-07
Fix Fixed Photo Station (QNAP Systems Inc.): 6.1.2, 6.0.22, 5.7.18 +2

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Active
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
QNAPPhoto Stationbefore 6.1.26.1.2Patch availableCNA
QNAPPhoto Stationbefore 6.0.226.0.22Patch availableCNA
QNAPPhoto Stationbefore 6.0.226.0.22Patch availableCNA
QNAPPhoto Stationbefore 5.7.185.7.18Patch availableCNA
QNAPPhoto Stationbefore 5.4.155.4.15Patch availableCNA
QNAPPhoto Stationbefore 5.2.145.2.14Patch availableCNA
  • Photo Station VendorQNAP Affected before 6.1.2 Fixed in 6.1.2 Patch available CNA
  • Photo Station VendorQNAP Affected before 6.0.22 Fixed in 6.0.22 Patch available CNA
  • Photo Station VendorQNAP Affected before 6.0.22 Fixed in 6.0.22 Patch available CNA
  • Photo Station VendorQNAP Affected before 5.7.18 Fixed in 5.7.18 Patch available CNA
  • Photo Station VendorQNAP Affected before 5.4.15 Fixed in 5.4.15 Patch available CNA
  • Photo Station VendorQNAP Affected before 5.2.14 Fixed in 5.2.14 Patch available CNA

CPE configurations NVD · 11

CPEVersionsRoleVendor
cpe:2.3:a:qnap:photo_station:*:*:*:*:*:*:*:*before 5.2.14VulnerableQNAP
cpe:2.3:o:qnap:qts:4.2.6:*:*:*:*:*:*:*4.2.6Running onQNAP
cpe:2.3:a:qnap:photo_station:*:*:*:*:*:*:*:*before 5.4.15VulnerableQNAP
cpe:2.3:o:qnap:qts:4.3.3:*:*:*:*:*:*:*4.3.3Running onQNAP
cpe:2.3:a:qnap:photo_station:*:*:*:*:*:*:*:*before 5.7.18VulnerableQNAP
cpe:2.3:o:qnap:qts:4.3.6:*:*:*:*:*:*:*4.3.6Running onQNAP
cpe:2.3:a:qnap:photo_station:*:*:*:*:*:*:*:*before 6.0.22VulnerableQNAP
cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*4.5.1 – 4.5.4.2012Running onQNAP
cpe:2.3:o:qnap:qts:5.0.0:*:*:*:*:*:*:*5.0.0Running onQNAP
cpe:2.3:a:qnap:photo_station:*:*:*:*:*:*:*:*before 6.1.2VulnerableQNAP
  • cpe:2.3:a:qnap:photo_station:*:*:*:*:*:*:*:* Versions before 5.2.14 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:4.2.6:*:*:*:*:*:*:* Versions 4.2.6 Running on ·QNAP
  • cpe:2.3:a:qnap:photo_station:*:*:*:*:*:*:*:* Versions before 5.4.15 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:4.3.3:*:*:*:*:*:*:* Versions 4.3.3 Running on ·QNAP
  • cpe:2.3:a:qnap:photo_station:*:*:*:*:*:*:*:* Versions before 5.7.18 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:4.3.6:*:*:*:*:*:*:* Versions 4.3.6 Running on ·QNAP
  • cpe:2.3:a:qnap:photo_station:*:*:*:*:*:*:*:* Versions before 6.0.22 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:* Versions 4.5.1 – 4.5.4.2012 Running on ·QNAP
  • cpe:2.3:o:qnap:qts:5.0.0:*:*:*:*:*:*:* Versions 5.0.0 Running on ·QNAP
  • cpe:2.3:a:qnap:photo_station:*:*:*:*:*:*:*:* Versions before 6.1.2 Vulnerable ·QNAP
Show 1 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:qnap:qts:5.0.1:*:*:*:*:*:*:*5.0.1Running onQNAP
  • cpe:2.3:o:qnap:qts:5.0.1:*:*:*:*:*:*:* Versions 5.0.1 Running on ·QNAP

Remediation

  • Fix · CNA Photo Station (QNAP Systems Inc.) Fixed in 6.1.2
  • Fix · CNA Photo Station (QNAP Systems Inc.) Fixed in 6.0.22
  • Fix · CNA Photo Station (QNAP Systems Inc.) Fixed in 6.0.22
  • Fix · CNA Photo Station (QNAP Systems Inc.) Fixed in 5.7.18
  • Fix · CNA Photo Station (QNAP Systems Inc.) Fixed in 5.4.15
  • Fix · CNA Photo Station (QNAP Systems Inc.) Fixed in 5.2.14

Timeline

  1. 2022-09-08 Added to CISA KEV
  2. 2026-10-02 Threatist record created from CVE-2022-27593
  3. 2026-10-03 Alias added: GHSA-c84w-pfmp-9cxg

References

Advisory 1

  • TI-2019-05103 Path traversal in QNAP NAS devices running Photo Station KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-05102 Path traversal in QNAP NAS devices running Photo Station KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-05100 Incorrect authorization in QNAP NAS devices running Photo Station KEVCVSS 3.1CRITICAL 9.8
  • TI-2017-14276 Information disclosure in QNAP Photo Station CVSS 3.1CRITICAL 9.8
  • TI-2021-19806 Improper authentication in Photo Station CVSS 3.1CRITICAL 9.8
  • TI-2023-25730 Command injection in QNAP Photo Station CVSS 3.1HIGH 8.8
See all 25 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences