Photo Station · Sandworm Watch

Sep 8, 2022high

CVE-2022-27593: QNAP Photo Station Externally Controlled Reference Vulnerability

Certain QNAP NAS running Photo Station with internet exposure contain an externally controlled reference to a resource vulnerability which can allow an attacker to modify system files. This vulnerability was observed being utilized in a Deadbolt ransomware campaign. Required action: Apply updates per vendor instructions.

CVE-2022-27593EPSS 87.9%Photo StationQNAP

CISA KEV ↗ · unattributed attribution

Jun 8, 2022high

CVE-2019-7195: QNAP Photo Station Path Traversal Vulnerability

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files. Required action: Apply updates per vendor instructions.

CVE-2019-7195EPSS 89.7%Photo StationQNAP

CISA KEV ↗ · unattributed attribution

Jun 8, 2022high

CVE-2019-7194: QNAP Photo Station Path Traversal Vulnerability

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files. Required action: Apply updates per vendor instructions.

CVE-2019-7194EPSS 83.0%Photo StationQNAP

CISA KEV ↗ · unattributed attribution

Jun 8, 2022high

CVE-2019-7192: QNAP Photo Station Improper Access Control Vulnerability

QNAP NAS devices running Photo Station contain an improper access control vulnerability allowing remote attackers to gain unauthorized access to the system. Required action: Apply updates per vendor instructions.

CVE-2019-7192EPSS 88.2%Photo StationQNAP

CISA KEV ↗ · unattributed attribution