QNAP Systems Inc. Photo Station vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting QNAP Systems Inc. Photo Station: 2 record(s), with affected versions and fixes.

CVE-2017-20210 Critical · 9.8 CWE-200 Nov 11, 2025

Photo Station 5.4.1 & 5.2.7 include the security fix for the vulnerability related to the XMR mining programs identified by internal research.

CVE-2022-27593 Critical · 9.1 KEV Urgent · 77 Public exploit Ransomware CWE-610 Sep 8, 2022

QNAP Photo Station Externally Controlled Reference Vulnerability

An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an attacker to modify system files. We have already fixed the vulnerability in the following versions: QTS 5.0.1: Photo Station 6.1.2 and later QTS 5.0.0/4.5.x: Photo Station 6.0.22 and later QTS 4.3.6: Photo Station 5.7.18 and later QTS 4.3.3: Photo Station 5.4.15 and later QTS 4.2.6: Photo Station 5.2.14 and later