Approved changes feed: RSS · Atom

cpe:2.3:a:qnap:multimedia_console:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorQnap (a402dda4-b7da-50eb-b0f8-700e564ee87d)
ProductMultimedia Console (c8a4961b-56ec-5bab-9bea-497941686dd2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-23364 vulnerable 2026-06-08 05:54:28.161366 Multimedia Console
HIGH (8.1)
A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to execute code via unspecified vectors. We have already fixed the vulnerability in the following versions: Multimedia Console 2.1.1 ( 2023/03/29 ) and later Multimedia Console 1.4.7 ( 2023/03/20 ) and later
Published: 2023-09-22T03:51:02.028Z
Updated: 2024-09-24T18:09:22.705Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38684 vulnerable 2026-06-08 05:33:48.296746 Buffer Overflow Vulnerability in Multimedia Console
HIGH (8.1)
A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Multimedia Console. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of Multimedia Console: Multimedia Console 1.4.3 ( 2021/10/05 ) and later Multimedia Console 1.5.3 ( 2021/10/05 ) and later
Published: 2021-11-13T00:50:11.720Z
Updated: 2024-09-17T02:16:43.031Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36195 vulnerable 2026-06-08 05:25:02.738953 SQL Injection Vulnerability in Multimedia Console and the Media Streaming Add-On
CRITICAL (9.8)
An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability allows remote attackers to obtain application information. QNAP has already fixed this vulnerability in the following versions of Multimedia Console and the Media Streaming add-on. QTS 4.3.3: Media Streaming add-on 430.1.8.10 and later QTS 4.3.6: Media Streaming add-on 430.1.8.8 and later QTS 4.4.x and later: Multimedia Console 1.3.4 and later We have also fixed this vulnerability in the following versions of QTS 4.3.3 and QTS 4.3.6, respectively: QTS 4.3.3.1624 Build 20210416 or later QTS 4.3.6.1620 Build 20210322 or later
Published: 2021-04-17T03:50:13.274Z
Updated: 2024-09-16T17:28:07.500Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2493 vulnerable 2026-06-08 05:24:59.302474 Cross-site Scripting Vulnerability in Multimedia Console
This cross-site scripting vulnerability in Multimedia Console allows remote attackers to inject malicious code. QANP have already fixed this vulnerability in Multimedia Console 1.1.5 and later.
Published: 2020-12-10T03:35:07.251Z
Updated: 2024-09-16T19:24:39.877Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.