CVE-2023-47213

First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. As for the other products, apply the workaround.

• CWE-798
• CWE-798

• https://jvn.jp/en/vu/JVNVU99077347/Third Party Advisory
• https://www.c-first.co.jp/information/ddososhirase/Vendor Advisory
• https://www.c-first.co.jp/wp/wp-content/uploads/2023/11/tuushin.pdfVendor Advisory
• https://jvn.jp/en/vu/JVNVU99077347/Third Party Advisory
• https://www.c-first.co.jp/information/ddososhirase/Vendor Advisory
• https://www.c-first.co.jp/wp/wp-content/uploads/2023/11/tuushin.pdfVendor Advisory

Published

Nov 16, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-47207In Delta Electronics InfraSuite Device Master v.1.0.7, a vul…9.8
• CVE-2023-47209A post authentication command injection vulnerability exists…7.2
• CVE-2023-4721Out-of-bounds Read in GitHub repository gpac/gpac prior to 2…5.5
• CVE-2023-47210Improper input validation for some Intel(R) PROSet/Wireless …4.7
• CVE-2023-47211A directory traversal vulnerability exists in the uploadMib …8.6
• CVE-2023-47212A heap-based buffer overflow vulnerability exists in the com…9.8
• CVE-2023-47215Stored cross-site scripting vulnerability which is exploitin…5.4
• CVE-2023-47216 in OpenHarmony v3.2.2 and prior versions allow a local atta…5.5
• CVE-2023-47217in OpenHarmony v3.2.2 and prior versions allow a local attac…5.5
• CVE-2023-47218An OS command injection vulnerability has been reported to a…8.3
• CVE-2023-47219A SQL injection vulnerability has been reported to affect Qu…8.8
• CVE-2023-4722Integer Overflow or Wraparound in GitHub repository gpac/gpa…5.5