CVE-2023-47564

🗓️ 02 Feb 2024 16:05:54Reported by qnapType

An incorrect permission assignment for critical resource vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the synchronization application for Qsync Central files arises from the improper assignment of permissions to the critical resource. This allows a malicious actor to gain access to read, modify, or delete data.	9 Feb 202400:00	–	bdu_fstec
Circl	CVE-2023-47564	25 Feb 202410:11	–	circl
CNNVD	QNAP Multiple Product Security Vulnerabilities	2 Feb 202400:00	–	cnnvd
Cvelist	CVE-2023-47564 Qsync Central	2 Feb 202416:05	–	cvelist
EUVD	EUVD-2023-51675	3 Oct 202520:07	–	euvd
NVD	CVE-2023-47564	2 Feb 202416:15	–	nvd
Prion	Code injection	2 Feb 202416:15	–	prion
Positive Technologies	PT-2023-8518 · Qnap · Qsync Central	6 Nov 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-47564	23 May 202505:16	–	redhatcve
Vulnrichment	CVE-2023-47564 Qsync Central	2 Feb 202416:05	–	vulnrichment

NVD

Node

qnap qsync_centralRange4.3.0.0–4.3.0.11

qnap qsync_centralRange4.4.0.0–4.4.0.15

[
  {
    "defaultStatus": "unaffected",
    "product": "Qsync Central",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "4.4.0.15 ( 2024/01/04 )",
        "status": "affected",
        "version": "4.4.x.x",
        "versionType": "custom"
      },
      {
        "lessThan": "4.3.0.11 ( 2024/01/11 )",
        "status": "affected",
        "version": "4.3.x.x",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
qnap	www.qnap.com/en/security-advisory/qsa-24-03

17 Jun 2026 06:32Current

7.7High risk

Vulners AI Score7.7

CVSS 3.18 - 8.1

EPSS0.01014

SSVC

CWE-732