CVE-2023-40158

Hidden functionality vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series and DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41 series are no longer supported, therefore updates for those products are not provided.

• CWE-912

• https://download.ganzsecurity.pl/Product
• https://ganzsecurity.com/release/1578/digimasterpixelmaster-security-noticeVendor Advisory
• https://jvn.jp/en/vu/JVNVU92545432/Third Party Advisory
• https://download.ganzsecurity.pl/Product
• https://ganzsecurity.com/release/1578/digimasterpixelmaster-security-noticeVendor Advisory
• https://jvn.jp/en/vu/JVNVU92545432/Third Party Advisory

Published

Aug 23, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-40151 When user authentication is not enabled the shell can exe…9.8
• CVE-2023-40152When Fuji Electric Tellus Lite V-Simulator parses a speciall…7.8
• CVE-2023-40153 The affected product is vulnerable to a cross-site scriptin…6.1
• CVE-2023-40154Incorrect default permissions in the Intel(R) SUR for Gamepl…7.8
• CVE-2023-40155Uncontrolled search path for some Intel(R) CST software befo…6.7
• CVE-2023-40156Uncontrolled search path element in some Intel(R) SSU softwa…7.8
• CVE-2023-40159Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-4016Under some circumstances, this weakness allows a user who ha…3.3
• CVE-2023-40160Directory traversal vulnerability exists in Mailing List Sea…3.7
• CVE-2023-40161Improper access control in some Intel Unite(R) Client softwa…7.8
• CVE-2023-40163An out-of-bounds write vulnerability exists in the allocate_…9.8
• CVE-2023-40164Notepad++ is a free and open-source source code editor. Vers…5.5