Open Nav
Sign Up

Vulnerability in QNAP VioStor NVR – CVE-2023-47565

Critical Vulnerability - QNAP VioStor

Bar Refael

January 10, 2024

CVSS v3 Score: 8.0
Vulnerability: OS Command Injection in QNAP VioStor NVR
Exploitation: Remotely exploitable with low attack complexity; public exploits available and known public exploitation.

QNAP VioStor Vulnerability Risk Evaluation:

Successful exploitation of this vulnerability in QNAP’s VioStor NVR could enable an attacker to execute remote code by exploiting the Network Time Protocol (NTP) settings.

Affected Products:

Technical Details:

  • QNAP VioStor NVR QVR firmware: All versions prior to 4.x.

Vulnerability Overview:

  • CVE-2023-47565: OS Command Injection vulnerability due to improper neutralization of special elements in the OS command. The flaw can lead to remote code execution by altering NTP settings.

Background Information:

  • Critical Infrastructure Sectors: Commercial Facilities
  • Deployment: Worldwide
  • Company Headquarters: Taiwan

Reported by:

  • Chad Seaman and Larry Cashdollar of Akamai Technologies.

Mitigations:

Vendor Recommendations:

  • Firmware Update: Users are advised to download and apply the latest QVR Firmware.
  • End of Life Notice: QVR Firmware 5.x and 4.x have reached end of life.

CISA Recommendations:

  • Minimize Network Exposure: Ensure control system devices/systems are not accessible from the internet.
  • Network Isolation: Use firewalls to isolate control system networks and remote devices from business networks.
  • Secure Remote Access: Utilize VPNs for remote access, and ensure they are updated to the most current version.
  • Impact Analysis and Risk Assessment: Perform thorough impact analysis and risk assessment before deploying defensive measures.

Additional Mitigation Guidance:

  • ICS Security Best Practices: Review and implement control systems security recommended practices on CISA’s ICS webpage (cisa.gov/ics).
  • Report Incidents: Report any suspected malicious activity to CISA for tracking and correlation against other incidents.
  • Known Exploited Vulnerabilities Catalog: Refer to the KEV entry for this vulnerability.

This vulnerability in QNAP VioStor NVR is a significant concern due to its potential for remote exploitation and known public exploits. Organizations using affected firmware versions should take immediate action to apply the recommended updates and adhere to the mitigation strategies outlined by both the vendor and CISA to safeguard their assets against potential cyber threats

Resources highlights

Cisco IOS and IOS XE SNMP Zero-Day Actively Exploited (CVE-2025-20352)

Cisco disclosed CVE-2025-20352, a stack overflow in the SNMP subsystem of IOS and IOS XE, now confirmed as actively exploited in the wild. Attackers can…

Read more >

CVE-2025-20352

SolarWinds Web Help Desk (WHD) Unauthenticated RCE Patch-Bypass (CVE-2025-26399)

SolarWinds released Web Help Desk 12.8.7 Hotfix 1 to fix CVE-2025-26399, an unauthenticated remote code execution flaw in the AjaxProxy component caused by unsafe deserialization.…

Read more >

CVE-2025-26399

SonicWall Cloud Backup Compromise & Ongoing SSLVPN Exploitation

Threat actors gained access to MySonicWall cloud backup preference files after brute-forcing the vendor’s portal. These files, although encrypted, contain sensitive configuration data such as…

Read more >

sonicwall cloud

Ongoing Supply-Chain Attack Targeting npm Packages (aka “Shai-Hulud”)

Beginning on September 14, 2025, and accelerating over the next two days, attackers launched a large-scale supply-chain attack against the npm ecosystem. The campaign injected…

Read more >

Shai-Hulud

FBI Advisory: UNC6040/UNC6395 Targeting Salesforce Environments

The FBI has issued a FLASH advisory detailing activity from the threat groups UNC6040 and UNC6395, who are actively conducting data theft and extortion campaigns…

Read more >

salesforce fbi advisory

CVE-2024-40766: SonicWall SSL VPN Flaw Actively Exploited by Ransomware Threat Actors

CVE-2024-40766 is a critical improper access control vulnerability in SonicWall SonicOS management access/SSLVPN. Successful exploitation enables unauthorized access and can, in some cases, crash the…

Read more >

CVE-2024-40766
Under Cyber Attack?

Fill out the form and we will contact you immediately.