Worth noting that this vuln doesn't require authentication to gain access to NAS devices to exploit them (the part of the photo app that is vulnerable isn't behind a gateway). Once on system, attackers can steal stored files, infect with ransomware (ransomware gangs have been targeting NAS devices since 2019), plant backdoor or turn them into a botnet