Skip to content
OpenAdvisories
High 1 exploited CVE ICSA-23-355-02 1 CVE

QNAP VioStor NVR

Published Dec 21, 2023 · Updated Dec 21, 2023

Vendor: QNAP Systems Product: VioStor NVR QVR firmware

Summary

Successful exploitation of this vulnerability could allow an attacker to achieve remote code execution by exploiting NTP settings.

Vulnerabilities 1

  • High 8.0
    CVE-2023-47565 Exploited EPSS 73%

    Legacy VioStor NVR

    An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability …

    QNAP Systems VioStor NVR
    KEV Dec 21, 2023

Revision history

  1. #1

    Initial Publication

References