Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-40158

Hidden functionality vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the aff

Description

Hidden functionality vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series and DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41 series are no longer supported, therefore updates for those products are not provided.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CBC Co.,Ltd. NR4H, NR8H, NR16H series

  • firmware all versionsaffected

CBC Co.,Ltd. DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41 series

  • firmware all versionsaffected

CBC Co.,Ltd. NR-4M, NR-8M, NR-16M series

  • firmware all versionsaffected

CBC Co.,Ltd. NR-4F, NR-8F, NR-16F series

  • firmware all versionsaffected

CBC Co.,Ltd. DR-16M, DR-8M, DR-4M51 series

  • firmware all versionsaffected

References