EUVD-2021-21009

Malware in sbrugna...

CVE-2022-27588 Vulnerability in QVR

We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.6 build 20220401 and later...

The vulnerability of the QNAP QVR video surveillance system lies in the lack of measures to neutralize special elements used in the operating system’s command set, allowing intruders to execute arbitrary commands.

The vulnerability of the QNAP QVR video surveillance system is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...