EUVD-2023-51673

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

OS command injection vulnerability in Photo Station allows command execution by authenticated users

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2023-47562	25 Feb 202410:11	–	circl
CNNVD	QNAP Systems Photo Station Command Injection Vulnerability	2 Feb 202400:00	–	cnnvd
CVE	CVE-2023-47562	2 Feb 202416:05	–	cve
Cvelist	CVE-2023-47562 Photo Station	2 Feb 202416:05	–	cvelist
NVD	CVE-2023-47562	2 Feb 202416:15	–	nvd
OpenVAS	QNAP Photo Station Multiple Vulnerabilities (QSA-24-08)	5 Feb 202400:00	–	openvas
OSV	CVE-2023-47562	2 Feb 202416:15	–	osv
Prion	Command injection	2 Feb 202416:15	–	prion
Tenable Nessus	QNAP Photo Station OS Command Injection (QSA-24-08)	9 Feb 202400:00	–	nessus
RedhatCVE	CVE-2023-47562	23 May 202505:16	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "262ec8ab-243f-37cd-add5-de5c3dbd8671",
        "vendor": {
          "name": "QNAP Systems Inc."
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "29fde120-0f42-317b-af79-fa6abf6cdc74",
        "product": {
          "name": "Photo Station"
        },
        "product_version": "6.4.x <6.4.2 ( 2023/12/15 )"
      }
    ]
  }
]

Source	Link
qnap	www.qnap.com/en/security-advisory/qsa-24-08

03 Oct 2025 20:07Current

8.5High risk

Vulners AI Score8.5

CVSS 3.17.4 - 8.8

EPSS0.00362

SSVC