2023-11-16 15:00:22 +00:00

32 lines
1.5 KiB
JSON

{
"id": "CVE-2023-47674",
"sourceIdentifier": "vultures@jpcert.or.jp",
"published": "2023-11-16T08:15:33.147",
"lastModified": "2023-11-16T13:51:19.370",
"vulnStatus": "Awaiting Analysis",
"descriptions": [
{
"lang": "en",
"value": "Missing authentication for critical function vulnerability in First Corporation's DVRs allows a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. As for the other products, apply the workaround."
},
{
"lang": "es",
"value": "La falta de autenticaci\u00f3n para una vulnerabilidad de funci\u00f3n cr\u00edtica en los DVR de First Corporation permite que un atacante remoto no autenticado reescriba u obtenga la informaci\u00f3n de configuraci\u00f3n del dispositivo afectado. Tenga en cuenta que las actualizaciones se proporcionan solo para los modelos m\u00e1s recientes de CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB y MD-808AB. En cuanto a los dem\u00e1s productos, aplique workaround."
}
],
"metrics": {},
"references": [
{
"url": "https://jvn.jp/en/vu/JVNVU99077347/",
"source": "vultures@jpcert.or.jp"
},
{
"url": "https://www.c-first.co.jp/information/ddososhirase/",
"source": "vultures@jpcert.or.jp"
},
{
"url": "https://www.c-first.co.jp/wp/wp-content/uploads/2023/11/tuushin.pdf",
"source": "vultures@jpcert.or.jp"
}
]
}