Multiple Vulnerabilities in Media Streaming Add-on

Summary

Multiple vulnerabilities have been reported to affect Media Streaming add-on:

• CVE-2023-47220: If exploited, the OS command injection vulnerability could allow remote attackers who have gained user access to execute arbitrary commands.
• CVE-2023-47222: If exploited, the exposure of sensitive information vulnerability could allow remote attackers to compromise the security of the system.

We have already fixed the vulnerability in the following version:

Recommendation

To fix the vulnerability, we recommend updating Media Streaming add-on to the latest version.

Updating Media Streaming add-on

1. Log on to QTS or QuTS hero as an administrator.
2. Open App Center and then click .
   A search box appears.
3. Type "Media Streaming add-on" and then press ENTER.
   Media Streaming add-on appears in the search results.
4. Click Update.
   A confirmation message appears.
   Note: The Update button is not available if your Media Streaming add-on is already up to date.
5. Click OK.
   The application is updated.