Input validation

2023-09-2204:15:00

PRIOn knowledge base

www.prio-n.com

input validation

buffer copy

qnap operating systems

remote code execution

unspecified vectors

nvd

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.9%

JSON

A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to execute code via unspecified vectors.

We have already fixed the vulnerability in the following versions:
Multimedia Console 2.1.1 ( 2023/03/29 ) and later
Multimedia Console 1.4.7 ( 2023/03/20 ) and later

CPENameOperatorVersion
multimedia_consolelt1.4.7
multimedia_consolege2.0.0
multimedia_consolelt2.1.1

Name	Operator	Version
multimedia_console	lt	1.4.7
multimedia_console	ge	2.0.0
multimedia_console	lt	2.1.1

References

www.qnap.com/en/security-advisory/qsa-23-29