Read the docs

C-first

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

C-first records in CISA KEV

No C-first vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Cfr-1004ea Firmware · all components

Priority MEDIUM 51

Missing authentication for critical function vulnerability in First Corporation's DVRs allows a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01264 Published 2023-11-16 No fix listed CWE-306
Priority MEDIUM 51

First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01091 Published 2023-11-16 No fix listed CWE-798
Open these records in search →