CVE-2022-27593 is a critical severity vulnerability with a CVSS score of 9.1. Exploits are available; patches have been released and should be applied urgently. This is classified as a zero-day vulnerability.
Very high probability of exploitation in the next 30 days
EPSS predicts the probability of exploitation in the next 30 days based on real-world threat data, complementing CVSS severity scores with actual risk assessment.
Certain QNAP NAS running Photo Station with internet exposure contain an externally controlled reference to a resource vulnerability which can allow an attacker to modify system files. This vulnerability was observed being utilized in a Deadbolt ransomware campaign.
| Vendor | Product |
|---|---|
| Qnap | Qts |
| Qnap | Photo Station |
Please cite this page when referencing data from Strobes VI. Proper attribution helps support our vulnerability intelligence research.