PT-2023-7828

CVE-2023-23364

·

Published

2023-09-21

·

Updated

2023-09-26

Description by

CVSS 3.1
10
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Multimedia Console versions prior to 1.4.7 Multimedia Console versions prior to 2.1.1
Description A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to execute code via unspecified vectors.
Recommendations For Multimedia Console versions prior to 1.4.7, update to version 1.4.7 or later. For Multimedia Console versions prior to 2.1.1, update to version 2.1.1 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-120: Buffer Copy without Checking Size of Input (\'Classic Buffer Overflow\')
Related identifiers
CVE-2023-23364
BDU:2023-08899
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com