CVE-2023-47565
QNAP VioStor NVR OS Command Injection Vulnerability
CVSS
—
No CVSS
EPSS
73.3%
p99
KEV
YES
Dec 21, 2023
Exploit Today
80
0-100
Published: — · Last modified: —
73.3%EPSS · 30 days73.3%
2026-06-302026-07-16
Product
QNAP / VioStor NVR
Vulnerability
QNAP VioStor NVR OS Command Injection Vulnerability
Added to KEV
Dec 21, 2023
Remediate by
Jan 11, 2024
Known ransomware use
No
Summary description
QNAP VioStar NVR contains an OS command injection vulnerability that allows authenticated users to execute commands via a network.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notes
https://www.qnap.com/en/security-advisory/qsa-23-48 ; https://nvd.nist.gov/vuln/detail/CVE-2023-47565
No related CVEs by CWE or product.