CBC Co.,Ltd. DR-16M, DR-8M, DR-4M51 series

• CVE-2023-40144 Unrated OS command injection vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versi 2.1%
• CVE-2023-40158 High 8.8 Hidden functionality vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versi 1.3%
• CVE-2023-38585 Unrated Improper authentication vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/ve 1.1%