CVE-2023-47213

Katalog CVE

CVSS 9.8 · Critical EPSS 1,1%

Kerentanan Use of Hard-coded Credentials pada c-first cfr-1004ea firmware, c-first cfr-1008ea firmware +26 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. As for the other products, apply the workaround.

Rincian

Terbit di NVD

16 November 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-798: Use of Hard-coded Credentials

EPSS (30 hari)

1,1% peluang dieksploitasi; lebih tinggi dari 64,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.c-first.co.jp/information/ddososhirase/ advisory vendor
• https://www.c-first.co.jp/wp/wp-content/uploads/2023/11/tuushin.pdf advisory vendor
• https://jvn.jp/en/vu/JVNVU99077347/ advisory pihak ketiga