Veille CVE

Semaine du 18 décembre au 24 décembre 2023

2 CVE

Critique 0 Élevée 2 Moyenne 0 Faible 0 Non évaluée 0 Tri : plus récentes
  1. CVE-2023-47565 8.8 Élevée Exploitée

    QNAP Systems Inc. VioStor NVR · Qnap qvr firmware

    An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following versions: QVR Firmware 5.0.0 and later

  2. CVE-2023-49897 8.8 Élevée Exploitée

    FXC Inc. AE1021PE · FXC Inc. AE1021 · Fxc ae1021 firmware · Fxc ae1021pe firmware

    An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version 2.0.9 and earlier. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product.