CVE-2023-32976 – Container Station

https://notcve.org/view.php?id=CVE-2023-32976

13 Oct 2023 — An OS command injection vulnerability has been reported to affect Container Station. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following version: Container Station 2.6.7.44 and later Se ha informado que una vulnerabilidad de inyección de comandos del Sistema Operativo afecta a Container Station. Si se explota, la vulnerabilidad podría permitir a los administradores autenticados ejecutar comandos ... • https://www.qnap.com/en/security-advisory/qsa-23-44 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •