QVR Smart Client
Vulnerability Description
An unquoted search path or element vulnerability has been reported to affect QVR Smart Client. If exploited, the vulnerability could allow local authenticated administrators to execute unauthorized code or commands via unspecified vectors. We have already fixed the vulnerability in the following version: Windows 10 SP1, Windows 11, Mac OS, and Mac M1: QVR Smart Client 2.4.0.0570 and later
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-27592
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Runzi Zhao, Security Researcher, QI-ANXIN
Affected Vendor
QNAP Systems Inc.
View all reports →