Severity
High
Analysis Summary
CVE-2022-27593
QNAP NAS could allow a remote attacker to obtain sensitive information, caused by externally controlled references to a resource. An attacker could exploit this vulnerability to modify system files, obtain sensitive information, and use this information to launch further attacks against the affected system.
Impact
- Information Disclosure
Indicators Of Compromise
CVE
- CVE-2022-27593
Affected Vendors
QNAP
Affected Products
- QNAP QTS 4.2.6
- QNAP QTS 4.3.3
- QNAP QTS 4.3.6
- QNAP QTS 5.0.0
Remediation
Refer to QNAP NAS Vulnerability for patch, upgrade or suggested workaround information.