← CVE Intelligence

CVE-2023-47802

Synology / Camera Firmware PUBLISHED

Description (CNA)

A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is found in the IP block functionality. This allows remote authenticated users with administrator privileges to execute arbitrary commands via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500 and TC500.

Affected (CNA)

Vendor / productVersions
Synology / Camera Firmwareaffected 1.0 before 1.0.7-0298

CWE

CWE-78

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.