An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the vulnerability could allow authenticated users to execute commands via a network.
We have already fixed the vulnerability in the following versions:
QVR Firmware 5.0.0 and later
\"}], \"value\": \"An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the vulnerability could allow authenticated users to execute commands via a network.\\n\\nWe have already fixed the vulnerability in the following versions:\\n\\nQVR Firmware 5.0.0\\u00a0and later\"}], \"impacts\": [{\"capecId\": \"CAPEC-88\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-88 OS Command Injection\"}]}], \"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"ADJACENT_NETWORK\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 8, \"baseSeverity\": \"HIGH\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"version\": \"3.1\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-78\", \"description\": \"CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2023-12-08T16:06:29.861Z\", \"orgId\": \"2fd009eb-170a-4625-932b-17a53af1051f\", \"shortName\": \"qnap\"}, \"references\": [{\"url\": \"https://www.qnap.com/en/security-advisory/qsa-23-48\"}], \"solutions\": [{\"lang\": \"en\", \"supportingMedia\": [{\"base64\": false, \"type\": \"text/html\", \"value\": \"We have already fixed the vulnerability in the following versions:
QVR Firmware 5.0.0 and later
\"}], \"value\": \"We have already fixed the vulnerability in the following versions:\\n\\nQVR Firmware 5.0.0\\u00a0and later\"}], \"source\": {\"advisory\": \"QSA-23-48\", \"discovery\": \"EXTERNAL\"}, \"title\": \"Legacy VioStor NVR\", \"x_generator\": {\"engine\": \"Vulnogram 0.1.0-dev\"}}}, \"cveMetadata\": {\"assignerOrgId\": \"2fd009eb-170a-4625-932b-17a53af1051f\", \"assignerShortName\": \"qnap\", \"cveId\": \"CVE-2023-47565\", \"datePublished\": \"2023-12-08T16:06:29.861Z\", \"dateReserved\": \"2023-11-06T14:11:12.322Z\", \"dateUpdated\": \"2025-10-21T23:05:29.811Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.1\"}"},{"alert":0,"cve":"CVE-2023-47565","id":5201,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.73277, \"percentile\": 0.9946}"},{"alert":0,"cve":"CVE-2023-47565","id":2983,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.73277, \"percentile\": 0.99459}"},{"alert":1,"cve":"CVE-2023-47565","id":715,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2023-47565\", \"cwes\": [\"CWE-78\"], \"dateAdded\": \"2023-12-21\", \"dueDate\": \"2024-01-11\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://www.qnap.com/en/security-advisory/qsa-23-48 ; https://nvd.nist.gov/vuln/detail/CVE-2023-47565\", \"product\": \"VioStor NVR\", \"requiredAction\": \"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.\", \"shortDescription\": \"QNAP VioStar NVR contains an OS command injection vulnerability that allows authenticated users to execute commands via a network.\", \"vendorProject\": \"QNAP\", \"vulnerabilityName\": \"QNAP VioStor NVR OS Command Injection Vulnerability\"}"}],"record":{"affected":[{"defaultStatus":"unaffected","platforms":["QVR Firmware"],"product":"VioStor NVR","vendor":"QNAP Systems Inc.","versions":[{"lessThan":"5.0.0","status":"affected","version":"4.x","versionType":"custom"}]}],"cna":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-02T21:09:37.379Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_transferred"],"url":"https://www.qnap.com/en/security-advisory/qsa-23-48"}],"title":"CVE Program Container"},{"metrics":[{"other":{"content":{"id":"CVE-2023-47565","options":[{"Exploitation":"active"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2023-12-20T05:00:54.187898Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2023-12-21","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-47565"},"type":"kev"}}],"providerMetadata":{"dateUpdated":"2025-10-21T23:05:29.811Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-47565"}],"timeline":[{"lang":"en","time":"2023-12-21T00:00:00.000Z","value":"CVE-2023-47565 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"defaultStatus":"unaffected","platforms":["QVR Firmware"],"product":"VioStor NVR","vendor":"QNAP Systems Inc.","versions":[{"lessThan":"5.0.0","status":"affected","version":"4.x","versionType":"custom"}]}],"credits":[{"lang":"en","type":"finder","user":"00000000-0000-4000-9000-000000000000","value":"Chad Seaman and Larry Cashdollar of Akamai Technologies reported this vulnerability to CISA"}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the vulnerability could allow authenticated users to execute commands via a network.
We have already fixed the vulnerability in the following versions:
QVR Firmware 5.0.0 and later
"}],"value":"An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the vulnerability could allow authenticated users to execute commands via a network.\n\nWe have already fixed the vulnerability in the following versions:\n\nQVR Firmware 5.0.0\u00a0and later"}],"impacts":[{"capecId":"CAPEC-88","descriptions":[{"lang":"en","value":"CAPEC-88 OS Command Injection"}]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-78","description":"CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2023-12-08T16:06:29.861Z","orgId":"2fd009eb-170a-4625-932b-17a53af1051f","shortName":"qnap"},"references":[{"url":"https://www.qnap.com/en/security-advisory/qsa-23-48"}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"We have already fixed the vulnerability in the following versions:
QVR Firmware 5.0.0 and later
"}],"value":"We have already fixed the vulnerability in the following versions:\n\nQVR Firmware 5.0.0\u00a0and later"}],"source":{"advisory":"QSA-23-48","discovery":"EXTERNAL"},"title":"Legacy VioStor NVR","x_generator":{"engine":"Vulnogram 0.1.0-dev"}}},"cveMetadata":{"assignerOrgId":"2fd009eb-170a-4625-932b-17a53af1051f","assignerShortName":"qnap","cveId":"CVE-2023-47565","datePublished":"2023-12-08T16:06:29.861Z","dateReserved":"2023-11-06T14:11:12.322Z","dateUpdated":"2025-10-21T23:05:29.811Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"cna_checked":1794241201,"cve":"CVE-2023-47565","description":"An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the vulnerability could allow authenticated users to execute commands via a network.\n\nWe have already fixed the vulnerability in the following versions:\n\nQVR Firmware 5.0.0\u00a0and later","epss":{"date":"2026-11-12","epss":0.73277,"percentile":0.99467},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2023-47565","cwes":["CWE-78"],"dateAdded":"2023-12-21","dueDate":"2024-01-11","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://www.qnap.com/en/security-advisory/qsa-23-48 ; https://nvd.nist.gov/vuln/detail/CVE-2023-47565","product":"VioStor NVR","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","shortDescription":"QNAP VioStar NVR contains an OS command injection vulnerability that allows authenticated users to execute commands via a network.","vendorProject":"QNAP","vulnerabilityName":"QNAP VioStor NVR OS Command Injection Vulnerability"},"kev_checked":1794522003,"products":"QNAP Systems Inc. VioStor NVR","references":["https://www.qnap.com/en/security-advisory/qsa-23-48","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-47565"],"score":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","provider":"qnap","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"solutions":"We have already fixed the vulnerability in the following versions:\n\nQVR Firmware 5.0.0\u00a0and later","state":"PUBLISHED","title":"Legacy VioStor NVR","updated_at":1794500401,"workarounds":""},"sources":[]}