QNAP Qvp-63a Firmware vulnerabilities

3 CVEs affecting QNAP Qvp-63a Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-27598, published 2023-03-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-23355, published 2023-03-29. High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days. An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote authenticated administrators to execute commands via…
CVE-2022-27598, published 2023-03-29. Low severity, CVSS 2.7. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authenticated administrators to get secret values. The…
CVE-2022-27597, published 2023-03-29. Low severity, CVSS 2.7. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authenticated administrators to get secret values. The…