CVE-2023-47674

🗓️ 16 Nov 2023 07:28:38Reported by jpcertType

Missing authentication vulnerability in First Corporation's DVRs allows remote attacker to rewrite or obtain device configuration

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2023-47674	11 Jun 202514:31	–	circl
CNNVD	C-First DVR Security Breach	16 Nov 202300:00	–	cnnvd
Cvelist	CVE-2023-47674	16 Nov 202307:28	–	cvelist
EUVD	EUVD-2023-51773	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	Multiple vulnerabilities in First Corporation's DVRs	17 Nov 202308:31	–	jvn
NVD	CVE-2023-47674	16 Nov 202308:15	–	nvd
Prion	Authentication flaw	16 Nov 202308:15	–	prion
Positive Technologies	PT-2023-30560 · First · Dvrs	16 Nov 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-47674	23 May 202504:11	–	redhatcve
Vulnrichment	CVE-2023-47674	16 Nov 202307:28	–	vulnrichment

NVD

Node

c-first cfr-1004ea_firmwareMatch-

AND

c-first cfr-1004eaMatch-

Node

c-first cfr-1008ea_firmwareMatch-

AND

c-first cfr-1008eaMatch-

Node

c-first cfr-1016ea_firmwareMatch-

AND

c-first cfr-1016eaMatch-

Node

c-first cfr-16eaa_firmwareMatch-

AND

c-first cfr-16eaaMatch-

Node

c-first cfr-16eab_firmwareMatch-

AND

c-first cfr-16eabMatch-

Node

c-first cfr-16eha_firmwareMatch-

AND

c-first cfr-16ehaMatch-

Node

c-first cfr-16ehd_firmwareMatch-

AND

c-first cfr-16ehdMatch-

Node

c-first cfr-4eaa_firmwareMatch-

AND

c-first cfr-4eaaMatch-

Node

c-first cfr-4eaam_firmwareMatch-

AND

c-first cfr-4eaamMatch-

Node

c-first cfr-4eab_firmwareMatch-

AND

c-first cfr-4eabMatch-

Node

c-first cfr-4eabc_firmwareMatch-

AND

c-first cfr-4eabcMatch-

Node

c-first cfr-4eha_firmwareMatch-

AND

c-first cfr-4ehaMatch-

Node

c-first cfr-4ehd_firmwareMatch-

AND

c-first cfr-4ehdMatch-

Node

c-first cfr-8eaa_firmwareMatch-

AND

c-first cfr-8eaaMatch-

Node

c-first cfr-8eab_firmwareMatch-

AND

c-first cfr-8eabMatch-

Node

c-first cfr-8eha_firmwareMatch-

AND

c-first cfr-8ehaMatch-

Node

c-first cfr-8ehd_firmwareMatch-

AND

c-first cfr-8ehdMatch-

Node

c-first cfr-904e_firmwareMatch-

AND

c-first cfr-904eMatch-

Node

c-first cfr-908e_firmwareMatch-

AND

c-first cfr-908eMatch-

Node

c-first cfr-916e_firmwareMatch-

AND

c-first cfr-916eMatch-

Node

c-first md-404aa_firmwareMatch-

AND

c-first md-404aaMatch-

Node

c-first md-404ab_firmwareMatch-

AND

c-first md-404abMatch-

Node

c-first md-404ha_firmwareMatch-

AND

c-first md-404haMatch-

Node

c-first md-404hd_firmwareMatch-

AND

c-first md-404hdMatch-

Node

c-first md-808aa_firmwareMatch-

AND

c-first md-808aaMatch-

Node

c-first md-808ab_firmwareMatch-

AND

c-first md-808abMatch-

Node

c-first md-808ha_firmwareMatch-

AND

c-first md-808haMatch-

Node

c-first md-808hd_firmwareMatch-

AND

c-first md-808hdMatch-

[
  {
    "vendor": "First Co., Ltd.",
    "product": "CFR-904E, CFR-908E, CFR-916E",
    "versions": [
      {
        "version": "firmware all versions",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "First Co., Ltd.",
    "product": "CFR-4EHD, CFR-8EHD, CFR-16EHD",
    "versions": [
      {
        "version": "firmware all versions",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "First Co., Ltd.",
    "product": "CFR-4EHA, CFR-8EHA, CFR-16EHA",
    "versions": [
      {
        "version": "firmware all versions",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "First Co., Ltd.",
    "product": "CFR-4EAAM, CFR-4EABC",
    "versions": [
      {
        "version": "firmware all versions",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "First Co., Ltd.",
    "product": "CFR-4EAA, CFR-8EAA, CFR-16EAA",
    "versions": [
      {
        "version": "firmware all versions",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "First Co., Ltd.",
    "product": "CFR-4EAB, CFR-8EAB, CFR-16EAB",
    "versions": [
      {
        "version": "firmware all versions",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "First Co., Ltd.",
    "product": "CFR-1004EA, CFR-1008EA, CFR-1016EA",
    "versions": [
      {
        "version": "firmware all versions",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "First Co., Ltd.",
    "product": "MD-404HD, MD-808HD",
    "versions": [
      {
        "version": "firmware all versions",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "First Co., Ltd.",
    "product": "MD-404HA, MD-808HA",
    "versions": [
      {
        "version": "firmware all versions",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "First Co., Ltd.",
    "product": "MD-404AA, MD-808AA",
    "versions": [
      {
        "version": "firmware all versions",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "First Co., Ltd.",
    "product": "MD-404AB, MD-808AB",
    "versions": [
      {
        "version": "firmware all versions",
        "status": "affected"
      }
    ]
  }
]

Source	Link
c-first	www.c-first.co.jp/wp/wp-content/uploads/2023/11/tuushin.pdf
jvn	www.jvn.jp/en/vu/JVNVU99077347/
c-first	www.c-first.co.jp/information/ddososhirase/

11 Jun 2025 15:15Current

9.4High risk

Vulners AI Score9.4

CVSS 3.19.8

EPSS0.01022

SSVC

CWE-306