CVE-2023-47674: falha crítica em First Co., Ltd. CFR-4EAB, CFR-8EAB, CFR-16EAB
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar CFR-1004EA, CFR-1008EA, CFR-1016EA+ Monitorar CFR-4EAA, CFR-8EAA, CFR-16EAA
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.8epss 1.3%
Missing authentication for critical function vulnerability in First Corporation's DVRs allows a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. As for the other products, apply the workaround.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
First Co., Ltd. · CFR-1004EA, CFR-1008EA, CFR-1016EAFirst Co., Ltd. · CFR-4EAA, CFR-8EAA, CFR-16EAAFirst Co., Ltd. · CFR-4EAAM, CFR-4EABCFirst Co., Ltd. · CFR-4EAB, CFR-8EAB, CFR-16EABFirst Co., Ltd. · CFR-4EHA, CFR-8EHA, CFR-16EHAFirst Co., Ltd. · CFR-4EHD, CFR-8EHD, CFR-16EHDFirst Co., Ltd. · CFR-904E, CFR-908E, CFR-916EFirst Co., Ltd. · MD-404AA, MD-808AAFirst Co., Ltd. · MD-404AB, MD-808ABFirst Co., Ltd. · MD-404HA, MD-808HAFirst Co., Ltd. · MD-404HD, MD-808HDCVEs relacionadas — First Co., Ltd. CFR-4EAB, CFR-8EAB, CFR-16EAB
No mesmo produto, das mais perigosas para as menos.