CVE-2023-5746

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability regarding use of externally-controlled format string is found in the cgi component. This allows remote attackers to execute arbitrary code via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.5-0185 may be affected: BC500 and TC500.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-134

Affected software

No affected versions have been published.

Timeline

Published
Oct 25, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-57478.8Bashis, a Security Researcher at IPVM has found a flaw that allows for a remote code execution during the installation of Wave on the cameraCVE-2023-57485.5Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology SSL VPN Client before 1.4.CVE-2023-57496.1The EmbedPress WordPress plugin before 3.9.2 does not sanitise and escape user input before outputting it back in the page, leading to a RefCVE-2023-57506.1The EmbedPress WordPress plugin before 3.9.2 does not sanitise and escape a parameter before outputting it back in the page containing a speCVE-2023-57517.8A local attacker with low privileges can read and modify any users files and cause a DoS in the working directory of the affected products dCVE-2023-57523.3When installing a package from a Mercurial VCS URL (ie "pip install hg+...") with pip prior to v23.3, the specified Mercurial revision couCVE-2023-57538.8Potential buffer overflows in the Bluetooth subsystem due to asserts being disabled in /subsys/bluetooth/host/hci_core.cCVE-2023-57549.8Sielco PolyEco1000 uses a weak set of default administrative credentials that can be easily guessed in remote password attacks and gain fullCVE-2023-57568.8The Digital Publications by Supsystic plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7CVE-2023-57574.8The WP Crowdfunding WordPress plugin before 2.1.8 does not sanitise and escape some of its settings, which could allow high privilege users CVE-2023-57586.1When opening a page in reader mode, the redirect URL could have caused attacker-controlled script to execute in a reflected Cross-Site ScripCVE-2023-57597.5In Helix Core versions prior to 2023.2, an unauthenticated remote Denial of Service (DoS) via the buffer was identified. Reported by Jason
CVE-2023-5746: Critical severity, CVSS 9.8 | Vulnix