CVE-2023-47220mediumCWE-78

CVE-2023-47220: falha de média gravidade em QNAP Systems Inc. Media Streaming add-on

Media Streaming add-on

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Media Streaming add-on

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.6epss 1.2%
An OS command injection vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following version: Media Streaming add-on 500.1.1.5 ( 2024/01/22 ) and later
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
Produtos afetados
QNAP Systems Inc. · Media Streaming add-on
CVEs relacionadas — QNAP Systems Inc. Media Streaming add-on

No mesmo produto, das mais perigosas para as menos.

CVE-2023-23369CRITICALQTS, Multimedia Console, and Media Streaming add-onEPSS 14.4%CVE-2020-36195CRITICALSQL Injection Vulnerability in Multimedia Console and the Media Streaming Add-OnEPSS 1.8%CVE-2024-50395MEDIUMMedia Streaming add-onEPSS 1.4%CVE-2021-34362HIGHCommand Injection Vulnerability in Media Streaming Add-onEPSS 1.3%CVE-2024-56808LOWMedia Streaming add-onEPSS 0.7%CVE-2023-47222CRITICALMedia Streaming add-onEPSS 0.5%