CVE-2023-41288 HIGH

CVE-2023-41288: Video Station

Vendor Qnap Systems Inc.
Product Video Station
Weakness CWE-78
Published January 5, 2024
Last update April 17, 2025
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following version: Video Station 5.7.2 ( 2023/11/23 ) and later

Key dates

02Disclosure timeline

January 5, 2024 CVE published
April 17, 2025 Record updated