All the vulnerabilites related to First Co., Ltd. - MD-404HA, MD-808HA
cve-2023-47213
Vulnerability from cvelistv5
Published
2023-11-16 07:29
Modified
2024-08-02 21:01
Severity
Summary
First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. As for the other products, apply the workaround.
References
Impacted products
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-02T21:01:22.825Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_transferred" ], "url": "https://www.c-first.co.jp/information/ddososhirase/" }, { "tags": [ "x_transferred" ], "url": "https://www.c-first.co.jp/wp/wp-content/uploads/2023/11/tuushin.pdf" }, { "tags": [ "x_transferred" ], "url": "https://jvn.jp/en/vu/JVNVU99077347/" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "CFR-904E, CFR-908E, CFR-916E", "vendor": "First Co., Ltd.", "versions": [ { "status": "affected", "version": "firmware all versions" } ] }, { "product": "CFR-4EHD, CFR-8EHD, CFR-16EHD", "vendor": "First Co., Ltd.", "versions": [ { "status": "affected", "version": "firmware all versions" } ] }, { "product": "CFR-4EHA, CFR-8EHA, CFR-16EHA", "vendor": "First Co., Ltd.", "versions": [ { "status": "affected", "version": "firmware all versions" } ] }, { "product": "CFR-4EAAM, CFR-4EABC", "vendor": "First Co., Ltd.", "versions": [ { "status": "affected", "version": "firmware all versions" } ] }, { "product": "CFR-4EAA, CFR-8EAA, CFR-16EAA", "vendor": "First Co., Ltd.", "versions": [ { "status": "affected", "version": "firmware all versions" } ] }, { "product": "CFR-4EAB, CFR-8EAB, CFR-16EAB", "vendor": "First Co., Ltd.", "versions": [ { "status": "affected", "version": "firmware all versions" } ] }, { "product": "CFR-1004EA, CFR-1008EA, CFR-1016EA", "vendor": "First Co., Ltd.", "versions": [ { "status": "affected", "version": "firmware all versions" } ] }, { "product": "MD-404HD, MD-808HD", "vendor": "First Co., Ltd.", "versions": [ { "status": "affected", "version": "firmware all versions" } ] }, { "product": "MD-404HA, MD-808HA", "vendor": "First Co., Ltd.", "versions": [ { "status": "affected", "version": "firmware all versions" } ] }, { "product": "MD-404AA, MD-808AA", "vendor": "First Co., Ltd.", "versions": [ { "status": "affected", "version": "firmware all versions" } ] }, { "product": "MD-404AB, MD-808AB", "vendor": "First Co., Ltd.", "versions": [ { "status": "affected", "version": "firmware all versions" } ] } ], "descriptions": [ { "lang": "en", "value": "First Corporation\u0027s DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. As for the other products, apply the workaround." } ], "problemTypes": [ { "descriptions": [ { "description": "Use of hard-coded password", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2023-11-16T07:29:28.376Z", "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert" }, "references": [ { "url": "https://www.c-first.co.jp/information/ddososhirase/" }, { "url": "https://www.c-first.co.jp/wp/wp-content/uploads/2023/11/tuushin.pdf" }, { "url": "https://jvn.jp/en/vu/JVNVU99077347/" } ] } }, "cveMetadata": { "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "assignerShortName": "jpcert", "cveId": "CVE-2023-47213", "datePublished": "2023-11-16T07:29:28.376Z", "dateReserved": "2023-11-15T01:42:55.281Z", "dateUpdated": "2024-08-02T21:01:22.825Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2023-47674
Vulnerability from cvelistv5
Published
2023-11-16 07:28
Modified
2024-08-02 21:16
Severity
Summary
Missing authentication for critical function vulnerability in First Corporation's DVRs allows a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. As for the other products, apply the workaround.
References
Impacted products
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-02T21:16:43.197Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_transferred" ], "url": "https://www.c-first.co.jp/information/ddososhirase/" }, { "tags": [ "x_transferred" ], "url": "https://www.c-first.co.jp/wp/wp-content/uploads/2023/11/tuushin.pdf" }, { "tags": [ "x_transferred" ], "url": "https://jvn.jp/en/vu/JVNVU99077347/" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "CFR-904E, CFR-908E, CFR-916E", "vendor": "First Co., Ltd.", "versions": [ { "status": "affected", "version": "firmware all versions" } ] }, { "product": "CFR-4EHD, CFR-8EHD, CFR-16EHD", "vendor": "First Co., Ltd.", "versions": [ { "status": "affected", "version": "firmware all versions" } ] }, { "product": "CFR-4EHA, CFR-8EHA, CFR-16EHA", "vendor": "First Co., Ltd.", "versions": [ { "status": "affected", "version": "firmware all versions" } ] }, { "product": "CFR-4EAAM, CFR-4EABC", "vendor": "First Co., Ltd.", "versions": [ { "status": "affected", "version": "firmware all versions" } ] }, { "product": "CFR-4EAA, CFR-8EAA, CFR-16EAA", "vendor": "First Co., Ltd.", "versions": [ { "status": "affected", "version": "firmware all versions" } ] }, { "product": "CFR-4EAB, CFR-8EAB, CFR-16EAB", "vendor": "First Co., Ltd.", "versions": [ { "status": "affected", "version": "firmware all versions" } ] }, { "product": "CFR-1004EA, CFR-1008EA, CFR-1016EA", "vendor": "First Co., Ltd.", "versions": [ { "status": "affected", "version": "firmware all versions" } ] }, { "product": "MD-404HD, MD-808HD", "vendor": "First Co., Ltd.", "versions": [ { "status": "affected", "version": "firmware all versions" } ] }, { "product": "MD-404HA, MD-808HA", "vendor": "First Co., Ltd.", "versions": [ { "status": "affected", "version": "firmware all versions" } ] }, { "product": "MD-404AA, MD-808AA", "vendor": "First Co., Ltd.", "versions": [ { "status": "affected", "version": "firmware all versions" } ] }, { "product": "MD-404AB, MD-808AB", "vendor": "First Co., Ltd.", "versions": [ { "status": "affected", "version": "firmware all versions" } ] } ], "descriptions": [ { "lang": "en", "value": "Missing authentication for critical function vulnerability in First Corporation\u0027s DVRs allows a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. As for the other products, apply the workaround." } ], "problemTypes": [ { "descriptions": [ { "description": "Missing authentication for critical function", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2023-11-16T07:28:38.522Z", "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert" }, "references": [ { "url": "https://www.c-first.co.jp/information/ddososhirase/" }, { "url": "https://www.c-first.co.jp/wp/wp-content/uploads/2023/11/tuushin.pdf" }, { "url": "https://jvn.jp/en/vu/JVNVU99077347/" } ] } }, "cveMetadata": { "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "assignerShortName": "jpcert", "cveId": "CVE-2023-47674", "datePublished": "2023-11-16T07:28:38.522Z", "dateReserved": "2023-11-15T01:42:54.432Z", "dateUpdated": "2024-08-02T21:16:43.197Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }