Record status Published
Identifier year (not publication year) 2022
Source publication Sep 8, 2022
Source updated Oct 21, 2025
Imported by cveboard Oct 24, 2026
CNA source text (English) DeadBolt Ransomware
An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an attacker to modify system files. We have already fixed the vulnerability in the following versions: QTS 5.0.1: Photo Station 6.1.2 and later QTS 5.0.0/4.5.x: Photo Station 6.0.22 and later QTS 4.3.6: Photo Station 5.7.18 and later QTS 4.3.3: Photo Station 5.4.15 and later QTS 4.2.6: Photo Station 5.2.14 and later
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Photo Station
Vendor QNAP Systems Inc.
Product Photo Station
Default status Unknown
Photo Station · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
unspecified affectedcustom 6.1.2 Unavailable None listed
Photo Station
Vendor QNAP Systems Inc.
Product Photo Station
Default status Unknown
Photo Station · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
unspecified affectedcustom 6.0.22 Unavailable None listed
Photo Station
Vendor QNAP Systems Inc.
Product Photo Station
Default status Unknown
Photo Station · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
unspecified affectedcustom 6.0.22 Unavailable None listed
Photo Station
Vendor QNAP Systems Inc.
Product Photo Station
Default status Unknown
Photo Station · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
unspecified affectedcustom 5.7.18 Unavailable None listed
Photo Station
Vendor QNAP Systems Inc.
Product Photo Station
Default status Unknown
Photo Station · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
unspecified affectedcustom 5.4.15 Unavailable None listed
Photo Station
Vendor QNAP Systems Inc.
Product Photo Station
Default status Unknown
Photo Station · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
unspecified affectedcustom 5.2.14 Unavailable None listed