Description
An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an attacker to modify system files. We have already fixed the vulnerability in the following versions: QTS 5.0.1: Photo Station 6.1.2 and later QTS 5.0.0/4.5.x: Photo Station 6.0.22 and later QTS 4.3.6: Photo Station 5.7.18 and later QTS 4.3.3: Photo Station 5.4.15 and later QTS 4.2.6: Photo Station 5.2.14 and later
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| QNAP Systems | Photo Station | unspecified – < 6.1.2, unspecified – < 6.0.22, unspecified – < 5.7.18, unspecified – < 5.4.15, unspecified – < 5.2.14 | 6.1.2 |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- QNAP QTS Photo Station External Reference - Local File Inclusion http/cves/2022/CVE-2022-27593.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.