CBC Co.,Ltd. DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41 series

• CVE-2023-40144 Unrated OS command injection vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versi 2.1%
• CVE-2023-40158 High 8.8 Hidden functionality vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versi 1.3%
• CVE-2023-38585 Unrated Improper authentication vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/ve 1.1%