CVE-2023-34976: Video Station
Published Oct 13, 2023
·Updated
A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network.
We have already fixed the vulnerability in the following version: Video Station 5.7.0 ( 2023/07/27 ) and later
Affected Software
1 affected component
QNAP Video Station<5.7.0
Remediation
Information
We have already fixed the vulnerability in the following version:
Video Station 5.7.0 ( 2023/07/27 ) and later
Event History
Oct 13, 2023
CVE Published
via MITRE·07:17 PM
Data Sourced
via MITRE·07:17 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this SQL injection vulnerability?
The vulnerability ID for this SQL injection vulnerability is CVE-2023-34976.
2
What is the severity of CVE-2023-34976?
The severity of CVE-2023-34976 is high with a score of 8.8.
3
Which software version is affected by CVE-2023-34976?
Video Station versions up to but not including 5.7.0 are affected by CVE-2023-34976.
4
How can the SQL injection vulnerability be exploited?
The SQL injection vulnerability can be exploited by authenticated users injecting malicious code via a network.
5
How can I fix CVE-2023-34976?
To fix CVE-2023-34976, update Video Station to version 5.7.0 (2023/07/27) or later.