QNAP QUSBCAM2 vulnerabilities

2 CVEs affecting QNAP QUSBCAM2, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-23373, published 2023-10-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-34344, published 2021-09-10. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. A stack buffer overflow vulnerability has been reported to affect QNAP device running QUSBCam2. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this…
CVE-2023-23373, published 2023-10-20. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. An OS command injection vulnerability has been reported to affect QUSBCam2. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the…