Missing authentication in First Co., Ltd. CFR-904E, CFR-908E, CFR-916E
Priority MEDIUM 51CWE-306Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-306.
Summary
Missing authentication for critical function vulnerability in First Corporation's DVRs allows a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. As for the other products, apply the workaround.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01264 69th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| First Co., Ltd. | CFR-904E, CFR-908E, CFR-916E | firmware all versions | — | No fix listed | CNA |
| First Co., Ltd. | CFR-4EHD, CFR-8EHD, CFR-16EHD | firmware all versions | — | No fix listed | CNA |
| First Co., Ltd. | CFR-4EHA, CFR-8EHA, CFR-16EHA | firmware all versions | — | No fix listed | CNA |
| First Co., Ltd. | CFR-4EAAM, CFR-4EABC | firmware all versions | — | No fix listed | CNA |
| First Co., Ltd. | CFR-4EAA, CFR-8EAA, CFR-16EAA | firmware all versions | — | No fix listed | CNA |
| First Co., Ltd. | CFR-4EAB, CFR-8EAB, CFR-16EAB | firmware all versions | — | No fix listed | CNA |
| First Co., Ltd. | CFR-1004EA, CFR-1008EA, CFR-1016EA | firmware all versions | — | No fix listed | CNA |
| First Co., Ltd. | MD-404HD, MD-808HD | firmware all versions | — | No fix listed | CNA |
| First Co., Ltd. | MD-404HA, MD-808HA | firmware all versions | — | No fix listed | CNA |
| First Co., Ltd. | MD-404AA, MD-808AA | firmware all versions | — | No fix listed | CNA |
| First Co., Ltd. | MD-404AB, MD-808AB | firmware all versions | — | No fix listed | CNA |
- CFR-904E, CFR-908E, CFR-916E VendorFirst Co., Ltd. Affected firmware all versions Fixed in — No fix listed CNA
- CFR-4EHD, CFR-8EHD, CFR-16EHD VendorFirst Co., Ltd. Affected firmware all versions Fixed in — No fix listed CNA
- CFR-4EHA, CFR-8EHA, CFR-16EHA VendorFirst Co., Ltd. Affected firmware all versions Fixed in — No fix listed CNA
- CFR-4EAAM, CFR-4EABC VendorFirst Co., Ltd. Affected firmware all versions Fixed in — No fix listed CNA
- CFR-4EAA, CFR-8EAA, CFR-16EAA VendorFirst Co., Ltd. Affected firmware all versions Fixed in — No fix listed CNA
- CFR-4EAB, CFR-8EAB, CFR-16EAB VendorFirst Co., Ltd. Affected firmware all versions Fixed in — No fix listed CNA
- CFR-1004EA, CFR-1008EA, CFR-1016EA VendorFirst Co., Ltd. Affected firmware all versions Fixed in — No fix listed CNA
- MD-404HD, MD-808HD VendorFirst Co., Ltd. Affected firmware all versions Fixed in — No fix listed CNA
- MD-404HA, MD-808HA VendorFirst Co., Ltd. Affected firmware all versions Fixed in — No fix listed CNA
- MD-404AA, MD-808AA VendorFirst Co., Ltd. Affected firmware all versions Fixed in — No fix listed CNA
- MD-404AB, MD-808AB VendorFirst Co., Ltd. Affected firmware all versions Fixed in — No fix listed CNA
CPE configurations NVD · 56
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:c-first:cfr-1004ea_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | C-first |
| cpe:2.3:h:c-first:cfr-1004ea:-:*:*:*:*:*:*:* | not specified by NVD | Running on | C-first |
| cpe:2.3:o:c-first:cfr-1008ea_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | C-first |
| cpe:2.3:h:c-first:cfr-1008ea:-:*:*:*:*:*:*:* | not specified by NVD | Running on | C-first |
| cpe:2.3:o:c-first:cfr-1016ea_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | C-first |
| cpe:2.3:h:c-first:cfr-1016ea:-:*:*:*:*:*:*:* | not specified by NVD | Running on | C-first |
| cpe:2.3:o:c-first:cfr-16eaa_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | C-first |
| cpe:2.3:h:c-first:cfr-16eaa:-:*:*:*:*:*:*:* | not specified by NVD | Running on | C-first |
| cpe:2.3:o:c-first:cfr-16eab_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | C-first |
| cpe:2.3:h:c-first:cfr-16eab:-:*:*:*:*:*:*:* | not specified by NVD | Running on | C-first |
- cpe:2.3:o:c-first:cfr-1004ea_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·C-first
- cpe:2.3:h:c-first:cfr-1004ea:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·C-first
- cpe:2.3:o:c-first:cfr-1008ea_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·C-first
- cpe:2.3:h:c-first:cfr-1008ea:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·C-first
- cpe:2.3:o:c-first:cfr-1016ea_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·C-first
- cpe:2.3:h:c-first:cfr-1016ea:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·C-first
- cpe:2.3:o:c-first:cfr-16eaa_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·C-first
- cpe:2.3:h:c-first:cfr-16eaa:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·C-first
- cpe:2.3:o:c-first:cfr-16eab_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·C-first
- cpe:2.3:h:c-first:cfr-16eab:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·C-first
Show 46 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:c-first:cfr-16eha_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | C-first |
| cpe:2.3:h:c-first:cfr-16eha:-:*:*:*:*:*:*:* | not specified by NVD | Running on | C-first |
| cpe:2.3:o:c-first:cfr-16ehd_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | C-first |
| cpe:2.3:h:c-first:cfr-16ehd:-:*:*:*:*:*:*:* | not specified by NVD | Running on | C-first |
| cpe:2.3:o:c-first:cfr-4eaa_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | C-first |
| cpe:2.3:h:c-first:cfr-4eaa:-:*:*:*:*:*:*:* | not specified by NVD | Running on | C-first |
| cpe:2.3:o:c-first:cfr-4eaam_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | C-first |
| cpe:2.3:h:c-first:cfr-4eaam:-:*:*:*:*:*:*:* | not specified by NVD | Running on | C-first |
| cpe:2.3:o:c-first:cfr-4eab_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | C-first |
| cpe:2.3:h:c-first:cfr-4eab:-:*:*:*:*:*:*:* | not specified by NVD | Running on | C-first |
| cpe:2.3:o:c-first:cfr-4eabc_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | C-first |
| cpe:2.3:h:c-first:cfr-4eabc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | C-first |
| cpe:2.3:o:c-first:cfr-4eha_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | C-first |
| cpe:2.3:h:c-first:cfr-4eha:-:*:*:*:*:*:*:* | not specified by NVD | Running on | C-first |
| cpe:2.3:o:c-first:cfr-4ehd_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | C-first |
| cpe:2.3:h:c-first:cfr-4ehd:-:*:*:*:*:*:*:* | not specified by NVD | Running on | C-first |
| cpe:2.3:o:c-first:cfr-8eaa_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | C-first |
| cpe:2.3:h:c-first:cfr-8eaa:-:*:*:*:*:*:*:* | not specified by NVD | Running on | C-first |
| cpe:2.3:o:c-first:cfr-8eab_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | C-first |
| cpe:2.3:h:c-first:cfr-8eab:-:*:*:*:*:*:*:* | not specified by NVD | Running on | C-first |
| cpe:2.3:o:c-first:cfr-8eha_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | C-first |
| cpe:2.3:h:c-first:cfr-8eha:-:*:*:*:*:*:*:* | not specified by NVD | Running on | C-first |
| cpe:2.3:o:c-first:cfr-8ehd_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | C-first |
| cpe:2.3:h:c-first:cfr-8ehd:-:*:*:*:*:*:*:* | not specified by NVD | Running on | C-first |
| cpe:2.3:o:c-first:cfr-904e_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | C-first |
| cpe:2.3:h:c-first:cfr-904e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | C-first |
| cpe:2.3:o:c-first:cfr-908e_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | C-first |
| cpe:2.3:h:c-first:cfr-908e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | C-first |
| cpe:2.3:o:c-first:cfr-916e_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | C-first |
| cpe:2.3:h:c-first:cfr-916e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | C-first |
| cpe:2.3:o:c-first:md-404aa_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | C-first |
| cpe:2.3:h:c-first:md-404aa:-:*:*:*:*:*:*:* | not specified by NVD | Running on | C-first |
| cpe:2.3:o:c-first:md-404ab_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | C-first |
| cpe:2.3:h:c-first:md-404ab:-:*:*:*:*:*:*:* | not specified by NVD | Running on | C-first |
| cpe:2.3:o:c-first:md-404ha_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | C-first |
| cpe:2.3:h:c-first:md-404ha:-:*:*:*:*:*:*:* | not specified by NVD | Running on | C-first |
| cpe:2.3:o:c-first:md-404hd_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | C-first |
| cpe:2.3:h:c-first:md-404hd:-:*:*:*:*:*:*:* | not specified by NVD | Running on | C-first |
| cpe:2.3:o:c-first:md-808aa_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | C-first |
| cpe:2.3:h:c-first:md-808aa:-:*:*:*:*:*:*:* | not specified by NVD | Running on | C-first |
| cpe:2.3:o:c-first:md-808ab_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | C-first |
| cpe:2.3:h:c-first:md-808ab:-:*:*:*:*:*:*:* | not specified by NVD | Running on | C-first |
| cpe:2.3:o:c-first:md-808ha_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | C-first |
| cpe:2.3:h:c-first:md-808ha:-:*:*:*:*:*:*:* | not specified by NVD | Running on | C-first |
| cpe:2.3:o:c-first:md-808hd_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | C-first |
| cpe:2.3:h:c-first:md-808hd:-:*:*:*:*:*:*:* | not specified by NVD | Running on | C-first |
- cpe:2.3:o:c-first:cfr-16eha_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·C-first
- cpe:2.3:h:c-first:cfr-16eha:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·C-first
- cpe:2.3:o:c-first:cfr-16ehd_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·C-first
- cpe:2.3:h:c-first:cfr-16ehd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·C-first
- cpe:2.3:o:c-first:cfr-4eaa_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·C-first
- cpe:2.3:h:c-first:cfr-4eaa:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·C-first
- cpe:2.3:o:c-first:cfr-4eaam_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·C-first
- cpe:2.3:h:c-first:cfr-4eaam:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·C-first
- cpe:2.3:o:c-first:cfr-4eab_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·C-first
- cpe:2.3:h:c-first:cfr-4eab:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·C-first
- cpe:2.3:o:c-first:cfr-4eabc_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·C-first
- cpe:2.3:h:c-first:cfr-4eabc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·C-first
- cpe:2.3:o:c-first:cfr-4eha_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·C-first
- cpe:2.3:h:c-first:cfr-4eha:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·C-first
- cpe:2.3:o:c-first:cfr-4ehd_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·C-first
- cpe:2.3:h:c-first:cfr-4ehd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·C-first
- cpe:2.3:o:c-first:cfr-8eaa_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·C-first
- cpe:2.3:h:c-first:cfr-8eaa:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·C-first
- cpe:2.3:o:c-first:cfr-8eab_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·C-first
- cpe:2.3:h:c-first:cfr-8eab:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·C-first
- cpe:2.3:o:c-first:cfr-8eha_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·C-first
- cpe:2.3:h:c-first:cfr-8eha:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·C-first
- cpe:2.3:o:c-first:cfr-8ehd_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·C-first
- cpe:2.3:h:c-first:cfr-8ehd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·C-first
- cpe:2.3:o:c-first:cfr-904e_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·C-first
- cpe:2.3:h:c-first:cfr-904e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·C-first
- cpe:2.3:o:c-first:cfr-908e_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·C-first
- cpe:2.3:h:c-first:cfr-908e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·C-first
- cpe:2.3:o:c-first:cfr-916e_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·C-first
- cpe:2.3:h:c-first:cfr-916e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·C-first
- cpe:2.3:o:c-first:md-404aa_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·C-first
- cpe:2.3:h:c-first:md-404aa:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·C-first
- cpe:2.3:o:c-first:md-404ab_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·C-first
- cpe:2.3:h:c-first:md-404ab:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·C-first
- cpe:2.3:o:c-first:md-404ha_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·C-first
- cpe:2.3:h:c-first:md-404ha:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·C-first
- cpe:2.3:o:c-first:md-404hd_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·C-first
- cpe:2.3:h:c-first:md-404hd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·C-first
- cpe:2.3:o:c-first:md-808aa_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·C-first
- cpe:2.3:h:c-first:md-808aa:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·C-first
- cpe:2.3:o:c-first:md-808ab_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·C-first
- cpe:2.3:h:c-first:md-808ab:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·C-first
- cpe:2.3:o:c-first:md-808ha_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·C-first
- cpe:2.3:h:c-first:md-808ha:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·C-first
- cpe:2.3:o:c-first:md-808hd_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·C-first
- cpe:2.3:h:c-first:md-808hd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·C-first
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-47674
- 2026-10-03 Alias added: GHSA-h9h6-5vxm-9xx3
References
More C-first Cfr-1004ea Firmware vulnerabilities
- TI-2023-25532 Hard-coded credentials in First Co., Ltd. CFR-904E, CFR-908E, CFR-916E CVSS 3.1CRITICAL 9.8
Sources
- CVE-2023-47674 · CVE Program
- CVE-2023-47674 · NVD
- FIRST EPSS
- GHSA-h9h6-5vxm-9xx3 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences