CyberSecBulletin

First vulnerabilities

We track 2 vulnerabilities in First products across 11 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 16, 2023.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest First vulnerabilities

  • 9.8 Critical severity

    CFR-904E, CFR-908E, CFR-916E: Missing Authentication for Critical Functionality

    CVE-2023-47674FirstEPSS 1.26%

    Missing authentication for critical function vulnerability in First Corporation's DVRs allows a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR

  • 9.8 Critical severity

    CFR-904E, CFR-908E, CFR-916E: Use of Hard-coded Credentials

    CVE-2023-47213FirstEPSS 1.09%

    First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB