critical9.8
CVE-2023-47213
First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration information of the…
Impact
First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. As for the other products, apply the workaround.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| C-First | Cfr-1004ea Firmware | All versions |
| C-First | Cfr-1008ea Firmware | All versions |
| C-First | Cfr-1016ea Firmware | All versions |
| C-First | Cfr-16eaa Firmware | All versions |
| C-First | Cfr-16eab Firmware | All versions |
| C-First | Cfr-16eha Firmware | All versions |
| C-First | Cfr-16ehd Firmware | All versions |
| C-First | Cfr-4eaa Firmware | All versions |
| C-First | Cfr-4eaam Firmware | All versions |
| C-First | Cfr-4eab Firmware | All versions |
| C-First | Cfr-4eabc Firmware | All versions |
| C-First | Cfr-4eha Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://jvn.jp/en/vu/JVNVU99077347/
- https://www.c-first.co.jp/information/ddososhirase/
- https://www.c-first.co.jp/wp/wp-content/uploads/2023/11/tuushin.pdf
- https://jvn.jp/en/vu/JVNVU99077347/
- https://www.c-first.co.jp/information/ddososhirase/
- https://www.c-first.co.jp/wp/wp-content/uploads/2023/11/tuushin.pdf