CyberSecBulletin

C-first vulnerabilities

We track 2 vulnerabilities in C-first products across 28 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 16, 2023.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest C-first vulnerabilities

  • 9.8 Critical severity

    CFR-904E, CFR-908E, CFR-916E: Missing Authentication for Critical Functionality

    CVE-2023-47674FirstEPSS 1.26%

    Missing authentication for critical function vulnerability in First Corporation's DVRs allows a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR

  • 9.8 Critical severity

    CFR-904E, CFR-908E, CFR-916E: Use of Hard-coded Credentials

    CVE-2023-47213FirstEPSS 1.09%

    First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB