PT-2022-3454 · Qnap · Photo Station

Thomas Fady · Published 2022-05-05 · Updated 2022-05-13 · CVE-2021-44057

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Photo Station versions prior to 5.4.13 Photo Station versions prior to 5.7.16 Photo Station versions prior to 6.0.20

Description An improper authentication issue affects QNAP devices running Photo Station, allowing attackers to bypass security restrictions and compromise the system's security.

Recommendations For versions prior to 5.4.13, update to Photo Station 5.4.13 or later. For versions prior to 5.7.16, update to Photo Station 5.7.16 or later. For versions prior to 6.0.20, update to Photo Station 6.0.20 or later.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2022-04232

CVE-2021-44057

Affected Products

Photo Station

References · 5

• https://bdu.fstec.ru/vul/2022-04232 · Security Note
• https://qnap.com/en/security-advisory/qsa-22-15 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-44057 · Security Note
• https://osv.dev/vulnerability/CVE-2021-44057 · Vendor Advisory
• https://t.me/cibsecurity/42010 · Telegram Post