CVE-2023-41288: Video Station
Published Jan 5, 2024
·Updated
An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow users to execute commands via a network.
We have already fixed the vulnerability in the following version: Video Station 5.7.2 ( 2023/11/23 ) and later
Affected Software
1 affected component
QNAP Video Station>=5.7.0<5.7.2
Remediation
Information
We have already fixed the vulnerability in the following version:
Video Station 5.7.2 ( 2023/11/23 ) and later
Event History
Jan 5, 2024
CVE Published
via MITRE·04:19 PM
Data Sourced
via MITRE·04:19 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-41288?
CVE-2023-41288 is classified as an OS command injection vulnerability affecting Video Station.
2
How do I fix CVE-2023-41288?
To fix CVE-2023-41288, update Video Station to version 5.7.2 or later.
3
Can CVE-2023-41288 be exploited remotely?
Yes, CVE-2023-41288 can be exploited remotely to execute commands through the network.
4
What versions of Video Station are affected by CVE-2023-41288?
Versions of Video Station from 5.7.0 to 5.7.1 are affected by CVE-2023-41288.
5
When was the fix for CVE-2023-41288 released?
The fix for CVE-2023-41288 was released on November 23, 2023.