CVEvulnerability

CVE-2023-47213

9.8 CRITICAL Published 2023-11-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-11-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-798

Description

First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. As for the other products, apply the workaround.

Affected configurations

• c-first cfr-1004ea firmware • c-first cfr-1008ea firmware • c-first cfr-1016ea firmware • c-first cfr-16eaa firmware • c-first cfr-16eab firmware • c-first cfr-16eha firmware • c-first cfr-16ehd firmware • c-first cfr-4eaa firmware • c-first cfr-4eaam firmware • c-first cfr-4eab firmware • c-first cfr-4eabc firmware • c-first cfr-4eha firmware • c-first cfr-4ehd firmware • c-first cfr-8eaa firmware • c-first cfr-8eab firmware • c-first cfr-8eha firmware • c-first cfr-8ehd firmware • c-first cfr-904e firmware • c-first cfr-908e firmware • c-first cfr-916e firmware • c-first md-404aa firmware • c-first md-404ab firmware • c-first md-404ha firmware • c-first md-404hd firmware • c-first md-808aa firmware • c-first md-808ab firmware • c-first md-808ha firmware • c-first md-808hd firmware

Related

Weakness · CWE (1)

  • CWE-798 Use of Hard-coded Credentials weakness

References