CVE-2023-23364highCWE-120

CVE-2023-23364: high-severity vulnerability in QNAP Systems Inc. Multimedia Console

Multimedia Console

Published · Updated

Follow this CVE+ Monitor Multimedia Console

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.1epss 0.9%
A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to execute code via unspecified vectors. We have already fixed the vulnerability in the following versions: Multimedia Console 2.1.1 ( 2023/03/29 ) and later Multimedia Console 1.4.7 ( 2023/03/20 ) and later
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
QNAP Systems Inc. · Multimedia Console
Related CVEs — QNAP Systems Inc. Multimedia Console

In the same product, most dangerous first.

CVE-2023-23369CRITICALQTS, Multimedia Console, and Media Streaming add-onEPSS 14.1%CVE-2020-36195CRITICALSQL Injection Vulnerability in Multimedia Console and the Media Streaming Add-OnEPSS 1.8%CVE-2021-38684HIGHBuffer Overflow Vulnerability in Multimedia ConsoleEPSS 1.3%CVE-2020-2493—Cross-site Scripting Vulnerability in Multimedia ConsoleEPSS 0.8%