A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is found in the IP block functionality. This allows remote authenticated users with administrator privileges to execute arbitrary commands via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500 and TC500.
References
No reference.
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: synology
Published: 2024-06-28T06:01:58.733Z
Updated: 2024-06-28T06:01:58.733Z
Reserved: 2023-11-10T07:59:45.608Z
Link: CVE-2023-47802
JSON object: View
NVD Information
No data.
Redhat Information
No data.
CWE