CVE-2023-23364

9.8 criticalEPSS 0.9%

Critical (9.8) in qnap multimedia console. EPSS 0.9% chance of exploitation in the next 30 days.

A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to execute code via unspecified vectors. We have already fixed the vulnerability in the following versions: Multimedia Console 2.1.1 ( 2023/03/29 ) and later Multimedia Console 1.4.7 ( 2023/03/20 ) and later

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWE: CWE-120
Published: 2023-09-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

qnap:multimedia_console

References

https://www.qnap.com/en/security-advisory/qsa-23-29
https://www.qnap.com/en/security-advisory/qsa-23-29

Check your stack JSON