CVE-2023-47213
—CVSS 3.1
9.8 critical
EPSS
1%p63
Published
()
Modified
Description
First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. As for the other products, apply the workaround.
- Vendors
- c-first
- Products
- cfr-1004ea firmware, cfr-1008ea firmware, cfr-1016ea firmware, cfr-16eaa firmware, cfr-16eab firmware, cfr-16eha firmware, cfr-16ehd firmware, cfr-4eaa firmware, cfr-4eaam firmware, cfr-4eab firmware, cfr-4eabc firmware, cfr-4eha firmware
- Weakness
- CWE-798
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.