Lucene search
HistoryOct 20, 2023 - 5:15 p.m.
CVE-2023-23373
os command injection
qusbcam2
vulnerability
version 2.0.3
network exploitation
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
25.7%
An OS command injection vulnerability has been reported to affect QUSBCam2. If exploited, the vulnerability could allow users to execute commands via a network.
We have already fixed the vulnerability in the following version:
QUSBCam2 2.0.3 ( 2023/06/15 ) and later
Affected configurations
Node
qnapqusbcam2Range2.0.0–2.0.3
Related
prion
prion
Command injection
2023-10-20 17:15:00
cve
cve
CVE-2023-23373
2023-10-20 17:15:08
vulnrichment
vulnrichment
CVE-2023-23373 QUSBCam2
2023-10-20 16:14:18
cvelist
cvelist
CVE-2023-23373 QUSBCam2
2023-10-20 16:14:18
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
25.7%
Related for NVD:CVE-2023-23373