CVE-2023-40158

Published Aug 23, 2023 CVSS 3.1 · 8.8 High EPSS 1.3% KEV · Not listed
Description
Hidden functionality vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series and DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41 series are no longer supported, therefore updates for those products are not provided.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-44765 Hidden functionality vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series and DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41 series are no longer supported, therefore updates for those products are not provided.
History
Type Values Removed Values Added
First Time appeared Cbc dr-16f
Cbc dr-16m
Cbc dr-4f
Cbc dr-4m41
Cbc dr-4m51
Cbc dr-8f
Cbc dr-8m
Cbc nr-16f
Cbc nr-4m
Cbc nr-8m
Weaknesses CWE-912
CPEs cpe:2.3:a:cbc:dr-4m51:*:*:*:*:*:*:*:*
cpe:2.3:h:cbc:dr-16f:*:*:*:*:*:*:*:*
cpe:2.3:h:cbc:dr-16m:*:*:*:*:*:*:*:*
cpe:2.3:h:cbc:dr-4f:*:*:*:*:*:*:*:*
cpe:2.3:h:cbc:dr-4m41:*:*:*:*:*:*:*:*
cpe:2.3:h:cbc:dr-8f:*:*:*:*:*:*:*:*
cpe:2.3:h:cbc:dr-8m:*:*:*:*:*:*:*:*
cpe:2.3:h:cbc:nr-16f:*:*:*:*:*:*:*:*
cpe:2.3:h:cbc:nr-4m:*:*:*:*:*:*:*:*
cpe:2.3:h:cbc:nr-8m:*:*:*:*:*:*:*:*
Vendors & Products Cbc dr-16f
Cbc dr-16m
Cbc dr-4f
Cbc dr-4m41
Cbc dr-4m51
Cbc dr-8f
Cbc dr-8m
Cbc nr-16f
Cbc nr-4m
Cbc nr-8m
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
jpcert
Published
Updated
Oct 11, 2024, 9:56 PM
Reserved
Aug 10, 2023, 8:28 AM
Status
Modified
Published
Aug 23, 2023, 3:15 AM
Modified
Jun 17, 2026, 6:16 AM