PT-2023-7828 · Qnap · Multimedia Console

H4Lo · Publicado 2023-09-21 · Atualizado 2023-09-26 · CVE-2023-23364

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Multimedia Console versions prior to 1.4.7 Multimedia Console versions prior to 2.1.1

Description A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to execute code via unspecified vectors.

Recommendations For Multimedia Console versions prior to 1.4.7, update to version 1.4.7 or later. For Multimedia Console versions prior to 2.1.1, update to version 2.1.1 or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-120

Identificadores relacionados

BDU:2023-08899

CVE-2023-23364

Produtos afetados

Multimedia Console

Referências · 12

• https://t.me/cibsecurity/70936 · Publicação no Telegram
• https://t.me/pentestingnews/39570 · Publicação no Telegram
• https://twitter.com/Komodosec/status/1705199781419893044 · Publicação no Twitter
• https://qnap.com/en/security-advisory/qsa-23-29 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1705073988429357500 · Publicação no Twitter
• https://t.me/cvenotify/58406 · Publicação no Telegram
• https://twitter.com/fridaysecurity/status/1705125467877978395 · Publicação no Twitter
• https://twitter.com/the_yellow_fall/status/1705123317320180107 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2023-23364 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-23364 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/1705092339767685353 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2023-08899 · Nota de Segurança