CyberSec.Space Logo
Back to CVE Browser

CVE-2023-47565

🔥 Known Exploited (CISA KEV)HIGH
8.0
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2023-12-08
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following versions: QVR Firmware 5.0.0 and later

Affected Platforms (CPE)

💻
Qnap

Qvr Firmware

>= 4.0.0 and < 5.0.0

References & Advisories

🔗 https://www.qnap.com/en/security-advisory/qsa-23-48
🔗 https://www.qnap.com/en/security-advisory/qsa-23-48
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-47565

Related Vulnerabilities

CVE-2026-658937.0

This vulnerability exists in CP PLUS EZ-P21 IP Camera due to an insecure debug feature enabled in the firmware. An attacker with ...

CVE-2026-645208.4

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies The ...

CVE-2026-645168.8

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets The VCP...

CVE-2026-64511

In the Linux kernel, the following vulnerability has been resolved: ACPI: NFIT: core: Fix possible NULL pointer dereference Afte...