QNAP VioStor NVR OS Command Injection Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 21/12/2023. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| VioStor NVR | Versions not published yet (product named by CISA KEV) | |
An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following versions: QVR Firmware 5.0.0 and later
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free