« Volver al listado

CVE-2022-27593

Estado: AnalizadaCrítica (9.1)⚠ Explotación activa

An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an attacker to modify system files. We have already fixed the vulnerability in the following versions: QTS 5.0.1: Photo Station 6.1.2 and later QTS 5.0.0/4.5.x: Photo Station 6.0.22 and later QTS 4.3.6: Photo Station 5.7.18 and later QTS 4.3.3: Photo Station 5.4.15 and later QTS 4.2.6: Photo Station 5.2.14 and later

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

CISA KEV — explotada activamente

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

CWE-610 (externally controlled reference) en aplicación web expuesta (Photo Station) con AV:N/AC:L permite inyección de path traversal para modificar archivos del sistema en NAS QNAP. Explotación activa confirmada con uso en ransomware.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Vulnerability ScanningRestrict File and Directory PermissionsPrivileged Account ManagementRemote Data StorageNetwork SegmentationLimit Access to Resource Over Network

Tecnologías afectadas (1)

Qnap — Photo Station

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-27593",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2022-27593",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "active"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2023-12-22T05:00:57.633423Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@qnapsecurity.com.tw",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 10,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 6,
        "exploitabilityScore": 3.9
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 9.1,
          "attackVector": "NETWORK",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security@qnapsecurity.com.tw",
      "affectedData": [
        {
          "vendor": "QNAP Systems Inc.",
          "product": "Photo Station",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "6.1.2",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "QTS 5.0.1"
          ]
        },
        {
          "vendor": "QNAP Systems Inc.",
          "product": "Photo Station",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "6.0.22",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "QTS 5.0.0"
          ]
        },
        {
          "vendor": "QNAP Systems Inc.",
          "product": "Photo Station",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "6.0.22",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "QTS 4.5.x"
          ]
        },
        {
          "vendor": "QNAP Systems Inc.",
          "product": "Photo Station",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "5.7.18",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "QTS 4.3.6"
          ]
        },
        {
          "vendor": "QNAP Systems Inc.",
          "product": "Photo Station",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "5.4.15",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "QTS 4.3.3"
          ]
        },
        {
          "vendor": "QNAP Systems Inc.",
          "product": "Photo Station",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "5.2.14",
              "versionType": "custom"
            }
          ],
          "platforms": [
            "QTS 4.2.6"
          ]
        }
      ]
    }
  ],
  "published": "2022-09-08T11:15:19.503",
  "references": [
    {
      "url": "https://www.qnap.com/en/security-advisory/qsa-22-24",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security@qnapsecurity.com.tw"
    },
    {
      "url": "https://www.qnap.com/en/security-advisory/qsa-22-24",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-27593",
      "tags": [
        "US Government Resource"
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@qnapsecurity.com.tw",
      "description": [
        {
          "lang": "en",
          "value": "CWE-610"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-610"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an attacker to modify system files. We have already fixed the vulnerability in the following versions: QTS 5.0.1: Photo Station 6.1.2 and later QTS 5.0.0/4.5.x: Photo Station 6.0.22 and later QTS 4.3.6: Photo Station 5.7.18 and later QTS 4.3.3: Photo Station 5.4.15 and later QTS 4.2.6: Photo Station 5.2.14 and later"
    },
    {
      "lang": "es",
      "value": "Se ha informado una vulnerabilidad de recursos de referencia controlada externamente afecta al QNAP NAS que ejecuta Photo Station. Si se explota, esto podría permitir a un atacante modificar los archivos del sistema. Ya hemos corregido la vulnerabilidad en las siguientes versiones: QTS versiones 5.0.1: Photo Station versiones 6.1.2 y posteriores QTS versiones 5.0.0/4.5.x: Photo Station versiones 6.0.22 y posteriores QTS versiones 4.3.6: Photo Station versiones 5.7.18 y posteriores QTS versiones 4.3.3: Photo Station versiones 5.4.15 y posteriores QTS versiones 4.2.6: Photo Station versiones 5.2.14 y posteriores"
    }
  ],
  "lastModified": "2026-06-17T04:37:19.550",
  "cisaActionDue": "2022-09-29",
  "cisaExploitAdd": "2022-09-08",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:qnap:photo_station:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "334FA052-177C-4583-9919-BB4EB9DC91A1",
              "versionEndExcluding": "5.2.14"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qnap:qts:4.2.6:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "1D9E6F8F-A433-45A7-8839-5D478FE179A4"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:qnap:photo_station:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2416B1E4-88F1-4601-AC15-D11B7BB9EB7D",
              "versionEndExcluding": "5.4.15"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qnap:qts:4.3.3:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C5994C07-17FE-4784-9FA4-9675BA8B4743"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:qnap:photo_station:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EF59D0C3-74CF-448A-935D-7C436330ABFD",
              "versionEndExcluding": "5.7.18"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qnap:qts:4.3.6:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "FE9FAC96-AA2A-4CA5-A170-8C0E6BD47391"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:qnap:photo_station:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "12A590AE-13D5-4F8F-802D-4331B63D5C0C",
              "versionEndExcluding": "6.0.22"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "36C84C4C-AAE2-4AC5-A723-64271BBB91A5",
              "versionEndIncluding": "4.5.4.2012",
              "versionStartIncluding": "4.5.1"
            },
            {
              "criteria": "cpe:2.3:o:qnap:qts:5.0.0:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "DC98874F-5D92-481D-B4E2-EC548727719C"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:qnap:photo_station:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BCB176FD-5FC1-4003-B336-6B51D8AC36DD",
              "versionEndExcluding": "6.1.2"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:qnap:qts:5.0.1:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B21E1993-94A3-4D65-ADB7-70DDB919AF8D"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "security@qnapsecurity.com.tw",
  "cisaRequiredAction": "Apply updates per vendor instructions.",
  "cisaVulnerabilityName": "QNAP Photo Station Externally Controlled Reference Vulnerability"
}