PT-2024-13428 · Unknown · Media Streaming Add-On

Yingmuo · CVE-2023-47220 · Published 2024-05-02 · Updated 2025-12-08

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Media Streaming add-on versions prior to 500.1.1.5

Description An OS command injection issue has been reported, affecting the Media Streaming add-on. This could allow authenticated administrators to execute commands via a network. The issue is remotely exploitable.

Recommendations For Media Streaming add-on versions prior to 500.1.1.5, update to version 500.1.1.5 or later to resolve the issue.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2023-47220

Affected Products

Media Streaming Add-On

References · 6

• https://qnap.com/en/security-advisory/qsa-24-15 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-47220 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-47220 · Security Note
• https://twitter.com/oktsec/status/1786282760593605023 · Twitter Post
• https://t.me/cveNotify/145168 · Telegram Post
• https://twitter.com/CVEnew/status/1786408550434062521 · Twitter Post