Description
Certain QNAP NAS running Photo Station with internet exposure contain an externally controlled reference to a resource vulnerability which can allow an attacker to modify system files. This vulnerability was observed being utilized in a Deadbolt ransomware campaign.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Photo Station | QNAP Systems Inc. / Photo Station | >= unspecified, < 6.1.2 | affected |
| Photo Station | QNAP Systems Inc. / Photo Station | >= unspecified, < 6.0.22 | affected |
| Photo Station | QNAP Systems Inc. / Photo Station | >= unspecified, < 6.0.22 | affected |
| Photo Station | QNAP Systems Inc. / Photo Station | >= unspecified, < 5.7.18 | affected |
| Photo Station | QNAP Systems Inc. / Photo Station | >= unspecified, < 5.4.15 | affected |
| Photo Station | QNAP Systems Inc. / Photo Station | >= unspecified, < 5.2.14 | affected |