c-first records
2 published records for vendor c-first.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2023-47674No exploit | Missing authentication for critical function vulnerability in First Corporation's DVRs allows a remote unauthenticated attacker to rewrite oc-first · cfr-1004ea firmware · CWE-306 | Critical9.8 | — | 1.3% | Nov 16, 2023 |
39Monitor | CVE-2023-47213No exploit | First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configurationc-first · cfr-1004ea firmware · CWE-798 | Critical9.8 | — | 1.1% | Nov 16, 2023 |
- CVE-2023-4767439Monitor
Missing authentication for critical function vulnerability in First Corporation's DVRs allows a remote unauthenticated attacker to rewrite o
CriticalCVSS 9.8No exploitEPSS 1%c-first · cfr-1004ea firmwareNov 16, 2023
- CVE-2023-4721339Monitor
First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration
CriticalCVSS 9.8No exploitEPSS 1%c-first · cfr-1004ea firmwareNov 16, 2023