Skip to content
NewA calmer, faster ZeroHour

Thousands of QNAP NAS devices hit by DeadBolt ransomware (CVE-2022-27593)

Help Net Securityby @zeljkazorz ()2 min read8 · 1 read
Analyze CVE-2022-27593 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2022-27593
QNAP Photo Station Externally Controlled Reference Flaw Exploited by DeadBolt Ransomware
9.188%KEVRansomware
KEV

From the original article

2 min read at helpnetsecurity.com

QNAP Systems has provided more information about the latest DeadBolt ransomware campaign targeting users of its network-attached storage (NAS) devices and the vulnerability the attackers are exploiting (CVE-2022-27593). CVE-2022-27593 exists because of an externally controlled reference that resolves to a resource that is outside of the intended control sphere, and affects the widely used Photo Station application.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.