What is CVE-2023-47802?

CVE-2023-47802 is a high-severity vulnerability in Synology Bc500, classified under OS Command Injection. CVSS score: 7.2/10. Published 2024-06-28.

How severe is CVE-2023-47802?

High severity. CVSS v3 base score is 7.2 out of 10.

RCE in Synology Bc500

CVE-2023-47802

A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is found in the IP block functionality. This allows remote authenticated users with administrator privileges to execute ar…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.015 (70.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Synology Bc500
Synology Bc500_firmware
Synology Camera Firmware — versions 1.0
Synology Tc500
Synology Tc500_firmware

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

security@synology.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2023-47802?: CVE-2023-47802 is a high-severity vulnerability in Synology Bc500, classified under OS Command Injection. CVSS score: 7.2/10. Published 2024-06-28.
How severe is CVE-2023-47802?: High severity. CVSS v3 base score is 7.2 out of 10.