CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2023-12-08
QNAP VioStor NVR OS Command Injection Vulnerability (CVE-2023-47565) Security Advisory & Mitigation Guide
[Affected Scope] Legacy QNAP VioStor NVR models running QVR Firmware 4.x
[Impact] Authenticated attackers can execute arbitrary OS commands via network requests, potentially leading to full system compromise
[Mitigation] Immediately upgrade QVR Firmware to version 5.0.0 or later, or restrict network access to the device