Vulnerabilities in Video Station

Summary

Multiple vulnerabilities have been reported to affect Video Station:

• CVE-2023-47563: If exploited, the OS command injection vulnerability could allow remote attackers to execute arbitrary commands on the operating system through the application's input.
• CVE-2023-50360: If exploited, the SQL injection vulnerability could allow attackers to inject malicious code.
• CVE-2024-14024: If an attacker gains local network access and has also gained an administrator account, they can then exploit the improper certificate validation vulnerability to compromise the security of the system.
• CVE-2024-14025: If an attacker gains local network access and has also gained an administrator account, they can then exploit the SQL injection vulnerability to execute unauthorized code or commands.

We have already fixed the vulnerabilities in the following version:

Recommendation

To fix the vulnerabilities, we recommend updating Video Station to the latest version.

Updating Video Station

1. Log on to QTS or QuTS hero as an administrator.
2. Open App Center and then click .
   A search box appears.
3. Type "Video Station" and then press ENTER.
   Video Station appears in the search results.
4. Click Update.
   A confirmation message appears.
   Note: The Update button is not available if your Video Station is already up to date.
5. Click OK.
   The application is updated.