Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: C-first Clear all filters
TI-2023-25532 CVE-2023-47213 · GHSA-hchc-m7jw-6mhm

Hard-coded credentials in First Co., Ltd. CFR-904E, CFR-908E, CFR-916E

Priority MEDIUM 51

First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01091 Published 2023-11-16 No fix listed CWE-798
TI-2023-25813 CVE-2023-47674 · GHSA-h9h6-5vxm-9xx3

Missing authentication in First Co., Ltd. CFR-904E, CFR-908E, CFR-916E

Priority MEDIUM 51

Missing authentication for critical function vulnerability in First Corporation's DVRs allows a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01264 Published 2023-11-16 No fix listed CWE-306