CVE-2023-3704

🗓️ 24 Aug 2023 06:42:48Reported by CERT-InType

The CP-Plus DVR is vulnerable to improper input validation, allowing unauthenticated attackers to change system time

Reporter	Title	Published	Views	Family All 7
CNNVD	CP-Plus DVR 输入验证错误漏洞	24 Aug 202300:00	–	cnnvd
Cvelist	CVE-2023-3704 Timestamp Modification Vulnerability in CP-Plus Digital Video Recorder	24 Aug 202306:42	–	cvelist
EUVD	EUVD-2023-44339	3 Oct 202520:07	–	euvd
NVD	CVE-2023-3704	24 Aug 202307:15	–	nvd
Prion	Input validation	24 Aug 202307:15	–	prion
Positive Technologies	PT-2023-25770	24 Aug 202300:00	–	ptsecurity
Vulnrichment	CVE-2023-3704 Timestamp Modification Vulnerability in CP-Plus Digital Video Recorder	24 Aug 202306:42	–	vulnrichment

NVD

Node

cpplusworld cp-uvr-1601e1-hc_firmwareRange<4.000.00at008.0.0.r20230302

AND

cpplusworld cp-uvr-1601e1-hcMatch-

Node

cpplusworld cp-uvr-0401l1-4kh_firmwareRange<4.000.00at008.0.0.r20230302

AND

cpplusworld cp-uvr-0401l1-4khMatch-

Node

cpplusworld cp-uvr-0401l1b-4kh_firmwareRange<4.000.00at008.0.0.r20230302

AND

cpplusworld cp-uvr-0401l1b-4khMatch-

Node

cpplusworld cp-uvr-0801f1-hc_firmwareRange<4.000.00at008.0.0.r20230302

AND

cpplusworld cp-uvr-0801f1-hcMatch-

Node

cpplusworld cp-uvr-0801k1-h_firmwareRange<4.000.00at008.0.0.r20230302

AND

cpplusworld cp-uvr-0801k1-hMatch-

Node

cpplusworld cp-uvr-0801k1b-h_firmwareRange<4.000.00at008.0.0.r20230302

AND

cpplusworld cp-uvr-0801k1b-hMatch-

Node

cpplusworld cp-uvr-0808k1-h_firmwareRange<4.000.00at008.0.0.r20230302

AND

cpplusworld cp-uvr-0808k1-hMatch-

Node

cpplusworld cp-uvr-1601e1-h_firmwareRange<4.000.00at008.0.0.r20230302

AND

cpplusworld cp-uvr-1601e1-hMatch-

Node

cpplusworld cp-uvr-1601e2-h_firmwareRange<4.000.00at008.0.0.r20230302

AND

cpplusworld cp-uvr-1601e2-hMatch-

[
  {
    "vendor": "Aditya Infotech Limited ",
    "product": "CP-UVR-1601E1-HC, CP-UVR-1601E2-H, CP-UVR-1601E1-H, CP-UVR-0801F1-HC, CP-UVR-0801K1-H, CP-UVR-0801K1B-H, CP-UVR-0808K1-H, CP-UVR-0401L1-4KH, CP-UVR-0401L1B-4KH",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "4.000.00AT008.0.R.20230302",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
cert-in	www.cert-in.org.in/s2cMainServlet

21 Nov 2024 08:17Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.15.3

EPSS0.00143

SSVC

CWE-20