ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2023-47674

—
CVSS 3.1
9.8 critical
EPSS
1%p68
Published
()
Modified
Description

Missing authentication for critical function vulnerability in First Corporation's DVRs allows a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. As for the other products, apply the workaround.

Vendors
c-first
Products
cfr-1004ea firmware, cfr-1008ea firmware, cfr-1016ea firmware, cfr-16eaa firmware, cfr-16eab firmware, cfr-16eha firmware, cfr-16ehd firmware, cfr-4eaa firmware, cfr-4eaam firmware, cfr-4eab firmware, cfr-4eabc firmware, cfr-4eha firmware
Weakness
CWE-306
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news

No ingested article mentions this CVE yet.