CVE-2023-38433Not scoredCWE-798

CVE-2023-38433: Fujitsu IP Series - Hardcoded Credentials

Fujitsu Limited · IP-HE950E

Affected: Fujitsu Limited IP-HE950E · Exploitation: check available, not yet exploited

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

3.7%probability of exploitation in the next 30 days

89th percentile

050100

Higher than 89% of scored CVEs

Not scored yet. The CVE record carries no CVSS score.

DescriptionCVE.org

Fujitsu Real-time Video Transmission Gear "IP series" use hard-coded credentials, which may allow a remote unauthenticated attacker to initialize or reboot the products, and as a result, terminate the video transmission. Affected products and versions are as follows: IP-HE950E firmware versions V01L001 to V01L053, IP-HE950D firmware versions V01L001 to V01L053, IP-HE900E firmware versions V01L001 to V01L010, IP-HE900D firmware versions V01L001 to V01L004, IP-900E / IP-920E firmware versions V01L001 to V02L061, IP-900D / IP-900ⅡD / IP-920D firmware versions V01L001 to V02L061, IP-90 firmware versions V01L001 to V01L013, and IP-9610 firmware versions V01L001 to V02L007.

Affected products8

From the CVE record. A product or version that is not listed is unknown, not unaffected.

Fujitsu Limited · IP-HE950Efirmware versions V01L001 to V01L053
Fujitsu Limited · IP-HE950Dfirmware versions V01L001 to V01L053
Fujitsu Limited · IP-HE900Efirmware versions V01L001 to V01L010
Fujitsu Limited · IP-HE900Dfirmware versions V01L001 to V01L004
Fujitsu Limited · IP-900E / IP-920Efirmware versions V01L001 to V02L061
Fujitsu Limited · IP-900D / IP-900ⅡD / IP-920Dfirmware versions V01L001 to V02L061
Fujitsu Limited · IP-90firmware versions V01L001 to V01L013
Fujitsu Limited · IP-9610firmware versions V01L001 to V02L007

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Check available, not yet exploited. A public nuclei template can confirm it on a system you are authorised to test.
CISA KEV: Not listed
Public check: Fujitsu IP Series - Hardcoded Credentials · nuclei template in projectdiscovery/nuclei-templates
Weakness: Hard-coded Credentials · Authentication
Vendor: Fujitsu Limited
Published: July 2023
Band: Check available, not yet exploited, July 2023

CoverageNo articles yet

No CyberSIXT article names CVE-2023-38433 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.