Should I upgrade the firmware from 3.22 to 6.27 first?
yes, update this an reboot to apply this update
check for users, scheduler and scripts created by external malicious actors
i recommend this path:
make backup and export and store them in your PC
update to 6.40.9 (last version with old bridge (without vlan filtering))
update firmware to 6.40.9
make backup and export and store them in your PC
6.42.12 i think in this version conversion from old to new bridge work well)
check new bridge configurations
update firmware to 6.42.12
6.48.6
update firmware to 6.48.6