Description
Missing authentication for critical function vulnerability in First Corporation's DVRs allows a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. As for the other products, apply the workaround.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
First Co., Ltd. CFR-904E, CFR-908E, CFR-916E
firmware all versionsaffected
First Co., Ltd. CFR-4EHD, CFR-8EHD, CFR-16EHD
firmware all versionsaffected
First Co., Ltd. CFR-4EHA, CFR-8EHA, CFR-16EHA
firmware all versionsaffected
First Co., Ltd. CFR-4EAAM, CFR-4EABC
firmware all versionsaffected
First Co., Ltd. CFR-4EAA, CFR-8EAA, CFR-16EAA
firmware all versionsaffected
First Co., Ltd. CFR-4EAB, CFR-8EAB, CFR-16EAB
firmware all versionsaffected
First Co., Ltd. CFR-1004EA, CFR-1008EA, CFR-1016EA
firmware all versionsaffected
First Co., Ltd. MD-404HD, MD-808HD
firmware all versionsaffected
First Co., Ltd. MD-404HA, MD-808HA
firmware all versionsaffected
First Co., Ltd. MD-404AA, MD-808AA
firmware all versionsaffected
First Co., Ltd. MD-404AB, MD-808AB
firmware all versionsaffected