Advisory Published


First published: Thu Nov 16 2023(Updated: )

Missing authentication for critical function vulnerability in First Corporation's DVRs allows a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. As for the other products, apply the workaround.


Affected SoftwareAffected VersionHow to fix
C-first Cfr-1004ea Firmware
C-first Cfr-1004ea
C-first Cfr-1008ea Firmware
C-first Cfr-1008ea
C-first Cfr-1016ea Firmware
C-first Cfr-1016ea
C-first Cfr-16eaa Firmware
C-first Cfr-16eaa
C-first Cfr-16eab Firmware
C-first Cfr-16eab
C-first Cfr-16eha Firmware
C-first Cfr-16eha
C-first Cfr-16ehd Firmware
C-first Cfr-16ehd
C-first Cfr-4eaa Firmware
C-first Cfr-4eaa
C-first Cfr-4eaam Firmware
C-first Cfr-4eaam
C-first Cfr-4eab Firmware
C-first Cfr-4eab
C-first Cfr-4eabc Firmware
C-first Cfr-4eabc
C-first Cfr-4eha Firmware
C-first Cfr-4eha
C-first Cfr-4ehd Firmware
C-first Cfr-4ehd
C-first Cfr-8eaa Firmware
C-first Cfr-8eaa
C-first Cfr-8eab Firmware
C-first Cfr-8eab
C-first Cfr-8eha Firmware
C-first Cfr-8eha
C-first Cfr-8ehd Firmware
C-first Cfr-8ehd
C-first Cfr-904e Firmware
C-first Cfr-904e
C-first Cfr-908e Firmware
C-first Cfr-908e
C-first Cfr-916e Firmware
C-first Cfr-916e
C-first Md-404aa Firmware
C-first Md-404aa
C-first Md-404ab Firmware
C-first Md-404ab
C-first Md-404ha Firmware
C-first Md-404ha
C-first Md-404hd Firmware
C-first Md-404hd
C-first Md-808aa Firmware
C-first Md-808aa
C-first Md-808ab Firmware
C-first Md-808ab
C-first Md-808ha Firmware
C-first Md-808ha
C-first Md-808hd Firmware
C-first Md-808hd

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.


SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2023 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203