| |
Podatność CVE-2023-47565
Publikacja: 2023-12-08 Modyfikacja: 2023-12-14
| Opis: |
An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the vulnerability could allow authenticated users to execute commands via a network.
We have already fixed the vulnerability in the following versions:
QVR Firmware 5.0.0 and later
|
Typ:
CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
)
Referencje: |
https://www.qnap.com/en/security-advisory/qsa-23-48
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
Polish
English