First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are provided only for Late model of CFR-4EABC, CFR-4EAB, CFR-8EAB, CFR-16EAB, MD-404AB, and MD-808AB. As for the other products, apply the workaround.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
CFR-904E, CFR-908E, CFR-916E
Vendor
First Co., Ltd.
Product
CFR-904E, CFR-908E, CFR-916E
Platforms
Unknown
Default status
Unknown
CFR-904E, CFR-908E, CFR-916E · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
firmware all versions
affected
Unavailable
Unavailable
Unavailable
None listed
CFR-4EHD, CFR-8EHD, CFR-16EHD
Vendor
First Co., Ltd.
Product
CFR-4EHD, CFR-8EHD, CFR-16EHD
Platforms
Unknown
Default status
Unknown
CFR-4EHD, CFR-8EHD, CFR-16EHD · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
firmware all versions
affected
Unavailable
Unavailable
Unavailable
None listed
CFR-4EHA, CFR-8EHA, CFR-16EHA
Vendor
First Co., Ltd.
Product
CFR-4EHA, CFR-8EHA, CFR-16EHA
Platforms
Unknown
Default status
Unknown
CFR-4EHA, CFR-8EHA, CFR-16EHA · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
firmware all versions
affected
Unavailable
Unavailable
Unavailable
None listed
CFR-4EAAM, CFR-4EABC
Vendor
First Co., Ltd.
Product
CFR-4EAAM, CFR-4EABC
Platforms
Unknown
Default status
Unknown
CFR-4EAAM, CFR-4EABC · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
firmware all versions
affected
Unavailable
Unavailable
Unavailable
None listed
CFR-4EAA, CFR-8EAA, CFR-16EAA
Vendor
First Co., Ltd.
Product
CFR-4EAA, CFR-8EAA, CFR-16EAA
Platforms
Unknown
Default status
Unknown
CFR-4EAA, CFR-8EAA, CFR-16EAA · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
firmware all versions
affected
Unavailable
Unavailable
Unavailable
None listed
CFR-4EAB, CFR-8EAB, CFR-16EAB
Vendor
First Co., Ltd.
Product
CFR-4EAB, CFR-8EAB, CFR-16EAB
Platforms
Unknown
Default status
Unknown
CFR-4EAB, CFR-8EAB, CFR-16EAB · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
firmware all versions
affected
Unavailable
Unavailable
Unavailable
None listed
CFR-1004EA, CFR-1008EA, CFR-1016EA
Vendor
First Co., Ltd.
Product
CFR-1004EA, CFR-1008EA, CFR-1016EA
Platforms
Unknown
Default status
Unknown
CFR-1004EA, CFR-1008EA, CFR-1016EA · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
firmware all versions
affected
Unavailable
Unavailable
Unavailable
None listed
MD-404HD, MD-808HD
Vendor
First Co., Ltd.
Product
MD-404HD, MD-808HD
Platforms
Unknown
Default status
Unknown
MD-404HD, MD-808HD · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
firmware all versions
affected
Unavailable
Unavailable
Unavailable
None listed
MD-404HA, MD-808HA
Vendor
First Co., Ltd.
Product
MD-404HA, MD-808HA
Platforms
Unknown
Default status
Unknown
MD-404HA, MD-808HA · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
firmware all versions
affected
Unavailable
Unavailable
Unavailable
None listed
MD-404AA, MD-808AA
Vendor
First Co., Ltd.
Product
MD-404AA, MD-808AA
Platforms
Unknown
Default status
Unknown
MD-404AA, MD-808AA · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
firmware all versions
affected
Unavailable
Unavailable
Unavailable
None listed
MD-404AB, MD-808AB
Vendor
First Co., Ltd.
Product
MD-404AB, MD-808AB
Platforms
Unknown
Default status
Unknown
MD-404AB, MD-808AB · Scoped product and version facts