{ "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", "CVE_data_meta": { "ID": "CVE-2023-47674", "ASSIGNER": "vultures@jpcert.or.jp", "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", "value": "Missing authentication for critical function vulnerability in First Corporation's DVRs allows a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. As for the other products, apply the workaround." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "Missing authentication for critical function" } ] } ] }, "affects": { "vendor": { "vendor_data": [ { "vendor_name": "First Co., Ltd.", "product": { "product_data": [ { "product_name": "CFR-904E, CFR-908E, CFR-916E", "version": { "version_data": [ { "version_affected": "=", "version_value": "firmware all versions" } ] } }, { "product_name": "CFR-4EHD, CFR-8EHD, CFR-16EHD", "version": { "version_data": [ { "version_affected": "=", "version_value": "firmware all versions" } ] } }, { "product_name": "CFR-4EHA, CFR-8EHA, CFR-16EHA", "version": { "version_data": [ { "version_affected": "=", "version_value": "firmware all versions" } ] } }, { "product_name": "CFR-4EAAM, CFR-4EABC", "version": { "version_data": [ { "version_affected": "=", "version_value": "firmware all versions" } ] } }, { "product_name": "CFR-4EAA, CFR-8EAA, CFR-16EAA", "version": { "version_data": [ { "version_affected": "=", "version_value": "firmware all versions" } ] } }, { "product_name": "CFR-4EAB, CFR-8EAB, CFR-16EAB", "version": { "version_data": [ { "version_affected": "=", "version_value": "firmware all versions" } ] } }, { "product_name": "CFR-1004EA, CFR-1008EA, CFR-1016EA", "version": { "version_data": [ { "version_affected": "=", "version_value": "firmware all versions" } ] } }, { "product_name": "MD-404HD, MD-808HD", "version": { "version_data": [ { "version_affected": "=", "version_value": "firmware all versions" } ] } }, { "product_name": "MD-404HA, MD-808HA", "version": { "version_data": [ { "version_affected": "=", "version_value": "firmware all versions" } ] } }, { "product_name": "MD-404AA, MD-808AA", "version": { "version_data": [ { "version_affected": "=", "version_value": "firmware all versions" } ] } }, { "product_name": "MD-404AB, MD-808AB", "version": { "version_data": [ { "version_affected": "=", "version_value": "firmware all versions" } ] } } ] } } ] } }, "references": { "reference_data": [ { "url": "https://www.c-first.co.jp/information/ddososhirase/", "refsource": "MISC", "name": "https://www.c-first.co.jp/information/ddososhirase/" }, { "url": "https://www.c-first.co.jp/wp/wp-content/uploads/2023/11/tuushin.pdf", "refsource": "MISC", "name": "https://www.c-first.co.jp/wp/wp-content/uploads/2023/11/tuushin.pdf" }, { "url": "https://jvn.jp/en/vu/JVNVU99077347/", "refsource": "MISC", "name": "https://jvn.jp/en/vu/JVNVU99077347/" } ] } }