First Co., Ltd. CFR-1004EA, CFR-1008EA, CFR-1016EA

• CVE-2023-47213 Critical 9.8 First Corporation's DVRs use a hard-coded password, which may allow a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected device. Note that updates are p 1.1%
• CVE-2023-47674 Critical 9.8 Missing authentication for critical function vulnerability in First Corporation's DVRs allows a remote unauthenticated attacker to rewrite or obtain the configuration information of the affected devic 1.3%