Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-47213

First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Not

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jpcert

Description

First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. As for the other products, apply the workaround.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

First Co., Ltd. CFR-904E, CFR-908E, CFR-916E

  • firmware all versionsaffected

First Co., Ltd. CFR-4EHD, CFR-8EHD, CFR-16EHD

  • firmware all versionsaffected

First Co., Ltd. CFR-4EHA, CFR-8EHA, CFR-16EHA

  • firmware all versionsaffected

First Co., Ltd. CFR-4EAAM, CFR-4EABC

  • firmware all versionsaffected

First Co., Ltd. CFR-4EAA, CFR-8EAA, CFR-16EAA

  • firmware all versionsaffected

First Co., Ltd. CFR-4EAB, CFR-8EAB, CFR-16EAB

  • firmware all versionsaffected

First Co., Ltd. CFR-1004EA, CFR-1008EA, CFR-1016EA

  • firmware all versionsaffected

First Co., Ltd. MD-404HD, MD-808HD

  • firmware all versionsaffected

First Co., Ltd. MD-404HA, MD-808HA

  • firmware all versionsaffected

First Co., Ltd. MD-404AA, MD-808AA

  • firmware all versionsaffected

First Co., Ltd. MD-404AB, MD-808AB

  • firmware all versionsaffected

References