CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2023-47674
Critical (9.8) in c-first. EPSS 1.3% chance of exploitation in the next 30 days.
Missing authentication for critical function vulnerability in First Corporation's DVRs allows a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. As for the other products, apply the workaround.
Severity
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
- CWE
- CWE-306
- Published
- Modified
- Record from
- the NVD, synced
Affected
- c-first:cfr-1004ea_firmware
- c-first:cfr-1008ea_firmware
- c-first:cfr-1016ea_firmware
- c-first:cfr-16eaa_firmware
- c-first:cfr-16eab_firmware
- c-first:cfr-16eha_firmware
- c-first:cfr-16ehd_firmware
- c-first:cfr-4eaa_firmware
- c-first:cfr-4eaam_firmware
- c-first:cfr-4eab_firmware
- c-first:cfr-4eabc_firmware
- c-first:cfr-4eha_firmware
- c-first:cfr-4ehd_firmware
- c-first:cfr-8eaa_firmware
- c-first:cfr-8eab_firmware
- c-first:cfr-8eha_firmware
- c-first:cfr-8ehd_firmware
- c-first:cfr-904e_firmware
- c-first:cfr-908e_firmware
- c-first:cfr-916e_firmware
- c-first:md-404aa_firmware
- c-first:md-404ab_firmware
- c-first:md-404ha_firmware
- c-first:md-404hd_firmware
- c-first:md-808aa_firmware
- c-first:md-808ab_firmware
- c-first:md-808ha_firmware
- c-first:md-808hd_firmware