¡¾Îó²îͨ¸æ¡¿QNAP NAS Photo StationÎó²î£¨CVE-2022-27593£©

Ðû²¼Ê±¼ä 2022-09-06


0x00 Îó²î¸ÅÊö

CVE   ID

CVE-2022-27593

·¢Ã÷ʱ¼ä

2022-09-06

Àà     ÐÍ

×ÊÔ´Íⲿ¿ØÖÆÒýÓÃ

µÈ     ¼¶

ÑÏÖØ

Ô¶³ÌʹÓÃ

ÊÇ

Ó°Ïì¹æÄ£


¹¥»÷ÖØÆ¯ºó

µÍ

Óû§½»»¥

ÎÞ

PoC/EXP


ÔÚҰʹÓÃ

ÊÇ


0x01 Îó²îÏêÇé

QNAP Systems, Inc.£¨ÍþÁªÍ¨£©Ö÷ÒªÉú²úÓÃÓÚÎļþ¹²Ïí¡¢ÐéÄ⻯¡¢´æ´¢ÖÎÀíºÍ¼à¿ØÓ¦ÓõÄÍøÂ總¼Ó´æ´¢×°±¸¡£¡£¡£¡£¡£¡£¡£

9ÔÂ3ÈÕ£¬£¬£¬£¬QNAPÐû²¼Ç徲ͨ¸æ£¬£¬£¬£¬Ä³Ð©Ì»Â¶ÔÚ»¥ÁªÍøÉϲ¢ÔËÐÐPhoto StationµÄQNAP NAS×°±¸Ôâµ½DeadBolt ÀÕË÷Èí¼þ¹¥»÷¡£¡£¡£¡£¡£¡£¡£

ÓÉÓÚijЩQNAP NAS×°±¸±£´æ¶Ô×ÊÔ´µÄÍⲿ¿ØÖÆÒýÓÃÎó²î£¬£¬£¬£¬¿ÉÄܵ¼ÖÂÐÞ¸ÄϵͳÎļþ£¬£¬£¬£¬¸ÃÎó²î×·×ÙΪCVE-2022-27593£¬£¬£¬£¬ÆäCVSSÆÀ·ÖΪ10.0¡£¡£¡£¡£¡£¡£¡£

DeadBoltÀÕË÷Èí¼þ¹¥»÷ʹÓøÃÎó²îÀ´¼ÓÃÜÖ±½ÓÅþÁ¬µ½»¥ÁªÍøµÄQNAP NAS×°±¸£¬£¬£¬£¬ÏÖÔÚQNAPÒѾ­Ðû²¼ÁËPhoto Station Ó¦ÓóÌÐòµÄÇå¾²¸üУ¬£¬£¬£¬²¢±Þ²ßËùÓÐQNAP NAS Óû§½« Photo Station ¸üе½×îпÉÓð汾¡£¡£¡£¡£¡£¡£¡£


Ó°Ïì¹æÄ£

²¿·ÖÔËÐÐPhoto Station ²¢Ì»Â¶ÔÚ»¥ÁªÍøÉϵÄQNAP NAS×°±¸

×¢£º½¨ÒéʹÓÃQuMagieÌæ»»Photo StationÀ´ÓÐÓÃÖÎÀí QNAP NAS ÖеÄÕÕÆ¬´æ´¢¡£¡£¡£¡£¡£¡£¡£

 

0x02 Çå¾²½¨Òé

ÏÖÔÚ´ËÎó²îÒѾ­ÐÞ¸´£¬£¬£¬£¬ÊÜÓ°ÏìÓû§¿ÉÉý¼¶µ½ÒÔϰ汾£º

QTS 5.0.1£ºPhoto Station 6.1.2 ¼°¸ü¸ß°æ±¾

QTS 5.0.0/4.5.x£ºPhoto Station 6.0.22 ¼°¸ü¸ß°æ±¾

QTS 4.3.6£ºPhoto Station 5.7.18 ¼°¸ü¸ß°æ±¾

QTS 4.3.3£ºPhoto Station 5.4.15 ¼°¸ü¸ß°æ±¾

QTS 4.2.6£ºPhoto Station 5.2.14 ¼°¸ü¸ß°æ±¾

ÆäËü½¨Òé

1.¹Ø±Õ·ÓÉÆ÷µÄ¶Ë¿Úת·¢¹¦Ð§¡£¡£¡£¡£¡£¡£¡£

2.ÔÚ NAS ÉÏÉèÖà myQNAPcloud ÒÔÆôÓÃÇå¾²Ô¶³Ì»á¼û²¢±ÜÃâ̻¶ÔÚ»¥ÁªÍøÉÏ¡£¡£¡£¡£¡£¡£¡£

3.½« NAS ¹Ì¼þ¸üе½×îа汾¡£¡£¡£¡£¡£¡£¡£

4.½« NAS ÉϵÄËùÓÐÓ¦ÓóÌÐò¸üе½×îа汾¡£¡£¡£¡£¡£¡£¡£

5.Ϊ NAS ÉϵÄËùÓÐÓû§ÕÊ»§ÉèÖÃÇ¿ÃÜÂë¡£¡£¡£¡£¡£¡£¡£

6.°´ÆÚ¾ÙÐпìÕպͱ¸·ÝÒÔ±£»£»£»¤Êý¾Ý¡£¡£¡£¡£¡£¡£¡£

Á´½Ó£º

https://www.qnap.com/en/security-advisory/qsa-22-24

 

0x03 ²Î¿¼Á´½Ó

https://www.qnap.com/en/security-news/2022/take-immediate-action-to-update-photo-station-to-the-latest-available-version

https://www.bleepingcomputer.com/news/security/qnap-patches-zero-day-used-in-new-deadbolt-ransomware-attacks/

https://nvd.nist.gov/vuln/detail/CVE-2022-27593

 

0x04 °æ±¾ÐÅÏ¢

°æ±¾

ÈÕÆÚ

ÐÞ¸ÄÄÚÈÝ

V1.0

2022-09-06

Ê×´ÎÐû²¼


0x05 ¸½Â¼

¼øºÚµ£±£Íø¼ò½é

¼øºÚµ£±£Íø½¨ÉèÓÚ1996Ä꣬£¬£¬£¬ÊÇÓÉÁôÃÀ²©Ê¿ÑÏÍû¼ÑŮʿ½¨ÉèµÄ¡¢ÓµÓÐÍêÈ«×ÔÖ÷֪ʶ²úȨµÄÐÅÏ¢Çå¾²¸ß¿Æ¼¼ÆóÒµ¡£¡£¡£¡£¡£¡£¡£ÊǺ£ÄÚ×î¾ßʵÁ¦µÄÐÅÏ¢Çå¾²²úÆ·¡¢Ç徲ЧÀͽâ¾ö¼Æ»®µÄÁ캽ÆóÒµÖ®Ò»¡£¡£¡£¡£¡£¡£¡£

¹«Ë¾×ܲ¿Î»ÓÚ±±¾©ÊÐÖйشåÈí¼þÔ°¼øºÚµ£±£Íø´óÏ㬣¬£¬£¬¹«Ë¾Ô±¹¤½ü4000ÈË£¬£¬£¬£¬Ñз¢ÍŶÓ1200ÓàÈË, ÊÖÒÕЧÀÍÍŶÓ1300ÓàÈË¡£¡£¡£¡£¡£¡£¡£ÔÚÌìϸ÷Ê¡¡¢ÊС¢×ÔÖÎÇøÉèÁ¢·ÖÖ§»ú¹¹ÁùÊ®¶à¸ö£¬£¬£¬£¬ÓµÓÐÁýÕÖÌìϵÄÏúÊÛϵͳ¡¢ÇþµÀϵͳºÍÊÖÒÕÖ§³Öϵͳ¡£¡£¡£¡£¡£¡£¡£¹«Ë¾ÓÚ2010Äê6ÔÂ23ÈÕÔÚÉîÛÚÖÐС°å¹ÒÅÆÉÏÊС£¡£¡£¡£¡£¡£¡££¨¹ÉƱ´úÂ룺002439£©

¶àÄêÀ´£¬£¬£¬£¬¼øºÚµ£±£ÍøÖÂÁ¦ÓÚÌṩ¾ßÓйú¼Ê¾ºÕùÁ¦µÄ×ÔÖ÷Á¢ÒìµÄÇå¾²²úÆ·ºÍ×î¼Ñʵ¼ùЧÀÍ£¬£¬£¬£¬×ÊÖú¿Í»§ÖÜÈ«ÌáÉýÆäIT»ù´¡ÉèÊ©µÄÇå¾²ÐÔºÍÉú²úЧÄÜ£¬£¬£¬£¬Îª´òÔìºÍÌáÉý¹ú¼Ê»¯µÄÃñ×åÐÅÏ¢Çå¾²¹¤ÒµÁì¾üÆ·ÅÆ¶ø²»Ð¸Æð¾¢¡£¡£¡£¡£¡£¡£¡£

 

¹ØÓÚ¼øºÚµ£±£Íø

¼øºÚµ£±£ÍøÇå¾²Ó¦¼±ÏìÓ¦ÖÐÐÄÖ÷ÒªÕë¶ÔÖ÷ÒªÇå¾²Îó²îµÄÔ¤¾¯¡¢¸ú×ٺͷÖÏíÈ«Çò×îеÄÍþвÇ鱨ºÍÇå¾²±¨¸æ¡£¡£¡£¡£¡£¡£¡£

¹Ø×¢ÒÔϹ«Öںţ¬£¬£¬£¬»ñȡȫÇò×îÐÂÇå¾²×ÊѶ£º

image.png