安全ID : QSA-23-08

Vulnerability in QVR Pro Client


  • 发布日期 : September 8, 2023

  • 通用漏洞披露 : CVE-2022-27599

  • 受影响产品: QVR Pro Client 2.3

严重程度

Moderate

状态

已解决


Summary

An insertion of sensitive information into log file vulnerability has been reported to affect QVR Pro Client. If exploited, the vulnerability could provide local authenticated administrators with a less-protected path to acquire information via unspecified vectors.

We have already fixed the vulnerability in the following version:

  • QVR Pro Client 2.3.0.0420 and later

Recommendation

To secure your device, we recommend regularly updating your system and applications to their latest versions to benefit from vulnerability fixes. 

Updating QVR Pro Client

To download the latest version of QVR Pro Client for your operating system, please visit https://www.qnap.com/en/utilities/surveillance/.

附件

致谢: Runzi Zhao, Security Researcher, QI-ANXIN

修订历史:
V1.0 (September 08, 2023) - Published

选择规格

      显示更多 隐藏更多
      open menu
      back to top