OS command injection vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H,...
Vendor
CBC Co.,Ltd. vulnerabilities
4 published CVES affecting CBC Co.,Ltd., from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 4
- Critical
- 0
- High
- 3
- Medium
- 1
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
- DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41 series 3
- dr-16f42a firmware 3
- dr-16f45at firmware 3
- dr-16h firmware 3
- DR-16M, DR-8M, DR-4M51 series 3
- dr-16m52 firmware 3
- dr-16m52-av firmware 3
- dr-4fx1 firmware 3
- dr-4h firmware 3
- dr-4m51-av firmware 3
- dr-8f42a firmware 3
- dr-8f45at firmware 3
- dr-8h firmware 3
- dr-8m52-av firmware 3
- drh8-4m41-a firmware 3
- nr-16f82-16p firmware 3
- nr-16f85-8pra firmware 3
- nr-16m firmware 3
- nr-4f firmware 3
- NR-4F, NR-8F, NR-16F series 3
- NR-4M, NR-8M, NR-16M series 3
- nr-8f firmware 3
- nr16h firmware 3
- nr4h firmware 3
- NR4H, NR8H, NR16H series 3
- nr8-4m71 firmware 3
- nr8-8m72 firmware 3
- nr8h firmware 3
- dr-16f 1
- dr-16h 1
Latest CBC Co.,Ltd. CVEs
Newest publication first
-
HighCVSS 8.8
-
HighCVSS 8.8
Hidden functionality vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H,...
-
HighCVSS 8.8
Improper authentication vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8...
-
MediumCVSS 5.3
The CBC Gem application before 9.24.1 for Android and before 9.26.0 for iOS has Unencrypted Analytics.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.