CVE-2023-47560: QuMagie
Published Jan 5, 2024
·Updated
An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands via a network.
We have already fixed the vulnerability in the following version: QuMagie 2.2.1 and later
Affected Software
1 affected component
QNAP Qumagie=2.2.0
Remediation
Information
We have already fixed the vulnerability in the following version:
QuMagie 2.2.1 and later
Event History
Jan 5, 2024
CVE Published
via MITRE·04:18 PM
Data Sourced
via MITRE·04:18 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-47560?
CVE-2023-47560 is considered a high-severity OS command injection vulnerability.
2
Who is affected by CVE-2023-47560?
Authenticated users of QuMagie version 2.2.0 are affected by CVE-2023-47560.
3
How do I fix CVE-2023-47560?
To fix CVE-2023-47560, upgrade to QuMagie version 2.2.1 or later.
4
What kind of vulnerability is CVE-2023-47560?
CVE-2023-47560 is an OS command injection vulnerability that allows command execution via a network.
5
Can CVE-2023-47560 be exploited remotely?
Yes, CVE-2023-47560 can be exploited remotely by authenticated users.