CVE-2023-47565 (published 2023-12-08T16:06:29.861Z)
An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the vulnerability could allow authenticated users to execute commands via a network.

We have already fixed the vulnerability in the following versions:

QVR Firmware 5.0.0 and later


Affected products: Vendor: QNAP Systems Inc.
Product: VioStor NVR
Versions: 4.x