9.8

CVE-2023-47213

EPSS 1.09%
Veröffentlicht 16.11.2023 08:15:32
Zuletzt bearbeitet 21.11.2024 08:29:58
Erkennungen
Login

First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. As for the other products, apply the workaround.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

NVD 28 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

C-first ≫ Cfr-1004ea Firmware Version -

C-first ≫ Cfr-1004ea Version -

C-first ≫ Cfr-1008ea Firmware Version -

C-first ≫ Cfr-1008ea Version -

C-first ≫ Cfr-1016ea Firmware Version -

C-first ≫ Cfr-1016ea Version -

C-first ≫ Cfr-16eaa Firmware Version -

C-first ≫ Cfr-16eaa Version -

C-first ≫ Cfr-16eab Firmware Version -

C-first ≫ Cfr-16eab Version -

C-first ≫ Cfr-16eha Firmware Version -

C-first ≫ Cfr-16eha Version -

C-first ≫ Cfr-16ehd Firmware Version -

C-first ≫ Cfr-16ehd Version -

C-first ≫ Cfr-4eaa Firmware Version -

C-first ≫ Cfr-4eaa Version -

C-first ≫ Cfr-4eaam Firmware Version -

C-first ≫ Cfr-4eaam Version -

C-first ≫ Cfr-4eab Firmware Version -

C-first ≫ Cfr-4eab Version -

C-first ≫ Cfr-4eabc Firmware Version -

C-first ≫ Cfr-4eabc Version -

C-first ≫ Cfr-4eha Firmware Version -

C-first ≫ Cfr-4eha Version -

C-first ≫ Cfr-4ehd Firmware Version -

C-first ≫ Cfr-4ehd Version -

C-first ≫ Cfr-8eaa Firmware Version -

C-first ≫ Cfr-8eaa Version -

C-first ≫ Cfr-8eab Firmware Version -

C-first ≫ Cfr-8eab Version -

C-first ≫ Cfr-8eha Firmware Version -

C-first ≫ Cfr-8eha Version -

C-first ≫ Cfr-8ehd Firmware Version -

C-first ≫ Cfr-8ehd Version -

C-first ≫ Cfr-904e Firmware Version -

C-first ≫ Cfr-904e Version -

C-first ≫ Cfr-908e Firmware Version -

C-first ≫ Cfr-908e Version -

C-first ≫ Cfr-916e Firmware Version -

C-first ≫ Cfr-916e Version -

C-first ≫ Md-404aa Firmware Version -

C-first ≫ Md-404aa Version -

C-first ≫ Md-404ab Firmware Version -

C-first ≫ Md-404ab Version -

C-first ≫ Md-404ha Firmware Version -

C-first ≫ Md-404ha Version -

C-first ≫ Md-404hd Firmware Version -

C-first ≫ Md-404hd Version -

C-first ≫ Md-808aa Firmware Version -

C-first ≫ Md-808aa Version -

C-first ≫ Md-808ab Firmware Version -

C-first ≫ Md-808ab Version -

C-first ≫ Md-808ha Firmware Version -

C-first ≫ Md-808ha Version -

C-first ≫ Md-808hd Firmware Version -

C-first ≫ Md-808hd Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.09%	0.611

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA-ADP	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-798 Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

https://jvn.jp/en/vu/JVNVU99077347/

Third Party Advisory

https://www.c-first.co.jp/information/ddososhirase/

Vendor Advisory

https://www.c-first.co.jp/wp/wp-content/uploads/2023/11/tuushin.pdf

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-47213

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-47213

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-47213

EUVD