CVE-2023-47564

Description

An incorrect permission assignment for critical resource vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network.

We have already fixed the vulnerability in the following versions: Qsync Central 4.4.0.15 ( 2024/01/04 ) and later Qsync Central 4.3.0.11 ( 2024/01/11 ) and later

NVD

Severity: HIGH
CVE ID: CVE-2023-47564
CVSS Score: 8.1
CVSS Metrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

QNAP Systems, Inc.

Severity: HIGH
CVE ID: CVE-2023-47564
CVSS Score: 8.0
CVSS Metrics: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Refrence: NVDMITRE

Proof Of Concept

C411e

CVE-2023-47564

Refrence: GitHub