{"cve":"CVE-2023-38433","nvd":{"published":"2023-07-26T08:15:10.227","modified":"2026-06-17T06:10:10.110","status":"Modified","description":"Fujitsu Real-time Video Transmission Gear \"IP series\" use hard-coded credentials, which may allow a remote unauthenticated attacker to initialize or reboot the products, and as a result, terminate the video transmission. Affected products and versions are as follows: IP-HE950E firmware versions V01L001 to V01L053, IP-HE950D firmware versions V01L001 to V01L053, IP-HE900E firmware versions V01L001 to V01L010, IP-HE900D firmware versions V01L001 to V01L004, IP-900E / IP-920E firmware versions V01L001 to V02L061, IP-900D / IP-900ⅡD / IP-920D firmware versions V01L001 to V02L061, IP-90 firmware versions V01L001 to V01L013, and IP-9610 firmware versions V01L001 to V02L007.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5},"cwes":["CWE-798"],"references":["https://jvn.jp/en/jp/JVN95727578/","https://www.fujitsu.com/global/products/computing/peripheral/video/download/","https://jvn.jp/en/jp/JVN95727578/","https://www.fujitsu.com/global/products/computing/peripheral/video/download/"],"products":["fujitsu:ip-900d_firmware","fujitsu:ip-900e_firmware","fujitsu:ip-900iid_firmware","fujitsu:ip-90_firmware","fujitsu:ip-920d_firmware","fujitsu:ip-920e_firmware","fujitsu:ip-9610_firmware","fujitsu:ip-he900d_firmware","fujitsu:ip-he900e_firmware","fujitsu:ip-he950d_firmware","fujitsu:ip-he950e_firmware"],"source":"nvd","synced_at":"2026-10-19T21:38:35.729974749+00:00"},"epss":{"cve":"CVE-2023-38433","score":0.03722,"percentile":0.89798,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}