CVE-2023-47213

Name: CVE-2023-47213
Creator: NVD / NIST
Published: 2023-11-16T08:15:32.84+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

CRITICALCVSS 9.8/10EPSS 1.09%

Last modified Jun 17, 2026

CVE-2023-47213 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. EPSS estimates a 1.09% chance of exploitation in the next 30 days.

Description

First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. As for the other products, apply the workaround.

Metrics

CVSS 3.1

9.8/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Probability

1.09%

61.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
C-First	Cfr-1004ea Firmware	All versions
C-First	Cfr-1008ea Firmware	All versions
C-First	Cfr-1016ea Firmware	All versions
C-First	Cfr-16eaa Firmware	All versions
C-First	Cfr-16eab Firmware	All versions
C-First	Cfr-16eha Firmware	All versions
C-First	Cfr-16ehd Firmware	All versions
C-First	Cfr-4eaa Firmware	All versions
C-First	Cfr-4eaam Firmware	All versions
C-First	Cfr-4eab Firmware	All versions
C-First	Cfr-4eabc Firmware	All versions
C-First	Cfr-4eha Firmware	All versions
C-First	Cfr-4ehd Firmware	All versions
C-First	Cfr-8eaa Firmware	All versions
C-First	Cfr-8eab Firmware	All versions
C-First	Cfr-8eha Firmware	All versions
C-First	Cfr-8ehd Firmware	All versions
C-First	Cfr-904e Firmware	All versions
C-First	Cfr-908e Firmware	All versions
C-First	Cfr-916e Firmware	All versions
C-First	Md-404aa Firmware	All versions
C-First	Md-404ab Firmware	All versions
C-First	Md-404ha Firmware	All versions
C-First	Md-404hd Firmware	All versions
C-First	Md-808aa Firmware	All versions
C-First	Md-808ab Firmware	All versions
C-First	Md-808ha Firmware	All versions
C-First	Md-808hd Firmware	All versions

References

https://jvn.jp/en/vu/JVNVU99077347/Third Party Advisory
https://www.c-first.co.jp/information/ddososhirase/Vendor Advisory
https://www.c-first.co.jp/wp/wp-content/uploads/2023/11/tuushin.pdfVendor Advisory
https://jvn.jp/en/vu/JVNVU99077347/Third Party Advisory
https://www.c-first.co.jp/information/ddososhirase/Vendor Advisory
https://www.c-first.co.jp/wp/wp-content/uploads/2023/11/tuushin.pdfVendor Advisory

Timeline

Published: Nov 16, 2023
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2023-47213?

How severe is CVE-2023-47213?

CVE-2023-47213 has a CVSS score of 9.8/10 (CRITICAL severity). The EPSS model estimates a 1.09% probability of exploitation in the next 30 days.

How do I fix CVE-2023-47213?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2023-47213?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST