CVE-2023-40144: CBC Co.,Ltd. NR4H, NR8H, NR16H series vulnerability
CBC Co.,Ltd. · NR4H, NR8H, NR16H series
Affected: CBC Co.,Ltd. NR4H, NR8H, NR16H series · Exploitation: possible (1 to 10%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 82% of scored CVEs
Not scored yet. The CVE record carries no CVSS score.
DescriptionCVE.org
OS command injection vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series and DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41 series are no longer supported, therefore updates for those products are not provided.
Affected products5
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- CBC Co.,Ltd. · NR4H, NR8H, NR16H seriesfirmware all versions
- CBC Co.,Ltd. · DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41 seriesfirmware all versions
- CBC Co.,Ltd. · NR-4M, NR-8M, NR-16M seriesfirmware all versions
- CBC Co.,Ltd. · NR-4F, NR-8F, NR-16F seriesfirmware all versions
- CBC Co.,Ltd. · DR-16M, DR-8M, DR-4M51 seriesfirmware all versions
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Possible (1 to 10%). EPSS between 1% and 10%.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Published
- August 2023
CoverageNo articles yet
No CyberSIXT article names CVE-2023-40144 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.