Cfr-1004ea Firmware vulnerabilities

2 known vulnerabilities in Cfr-1004ea Firmware from C-first. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  CFR-904E, CFR-908E, CFR-916E: Missing Authentication for Critical Functionality

  CVE-2023-47674Nov 16, 2023FirstEPSS 1.26%

  Missing authentication for critical function vulnerability in First Corporation's DVRs allows a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR

• 9.8 Critical severity

  CFR-904E, CFR-908E, CFR-916E: Use of Hard-coded Credentials

  CVE-2023-47213Nov 16, 2023FirstEPSS 1.09%

  First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB