CBC Co.,Ltd. NR-4M, NR-8M, NR-16M series

• CVE-2023-40144 Unrated OS command injection vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versi 2.1%
• CVE-2023-40158 High 8.8 Hidden functionality vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versi 1.3%
• CVE-2023-38585 Unrated Improper authentication vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/ve 1.1%