CVE-2023-38585

Katalog CVE

CVSS 8.8 · High EPSS 1,1%

Kerentanan Improper Authentication pada cbc nr4h firmware, cbc nr8h firmware +21 lainnya. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

Improper authentication vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series and DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41 series are no longer supported, therefore updates for those products are not provided.

Rincian

Terbit di NVD

23 Agustus 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-287: Improper Authentication

EPSS (30 hari)

1,1% peluang dieksploitasi; lebih tinggi dari 63,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://ganzsecurity.com/release/1578/digimasterpixelmaster-security-notice advisory vendor
• https://jvn.jp/en/vu/JVNVU92545432/ advisory pihak ketiga
• https://download.ganzsecurity.pl/ product