CVE-2023-38585
Improper authentication vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series and DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41 series are no longer supported, therefore updates for those products are not provided.
Published:Aug 23, 2023
Last Modified:Nov 21, 2024
EPS:Aug 23, 2023
EPSS Score:0.00833
CVSS Score:8.8
Affected Products
Vendor
Product
Action
Vendor
Cbc
Product
Dr-16f42a
Cbc
Dr-16f42a
Vendor
Cbc
Product
Dr-16f42a Firmware
Cbc
Dr-16f42a Firmware
Vendor
Cbc
Product
Dr-16f45at
Cbc
Dr-16f45at
Vendor
Cbc
Product
Dr-16f45at Firmware
Cbc
Dr-16f45at Firmware
Vendor
Cbc
Product
Dr-16h
Cbc
Dr-16h
Vendor
Cbc
Product
Dr-16h Firmware
Cbc
Dr-16h Firmware
Vendor
Cbc
Product
Dr-16m52
Cbc
Dr-16m52
Vendor
Cbc
Product
Dr-16m52-av
Cbc
Dr-16m52-av
Vendor
Cbc
Product
Dr-16m52-av Firmware
Cbc
Dr-16m52-av Firmware
Vendor
Cbc
Product
Dr-16m52 Firmware
Cbc
Dr-16m52 Firmware
Vendor
Cbc
Product
Dr-4fx1
Cbc
Dr-4fx1
Vendor
Cbc
Product
Dr-4fx1 Firmware
Cbc
Dr-4fx1 Firmware
Vendor
Cbc
Product
Dr-4h
Cbc
Dr-4h
Vendor
Cbc
Product
Dr-4h Firmware
Cbc
Dr-4h Firmware
Vendor
Cbc
Product
Dr-4m51-av
Cbc
Dr-4m51-av
Vendor
Cbc
Product
Dr-4m51-av Firmware
Cbc
Dr-4m51-av Firmware
Vendor
Cbc
Product
Dr-8f42a
Cbc
Dr-8f42a
Vendor
Cbc
Product
Dr-8f42a Firmware
Cbc
Dr-8f42a Firmware
Vendor
Cbc
Product
Dr-8f45at
Cbc
Dr-8f45at
Vendor
Cbc
Product
Dr-8f45at Firmware
Cbc
Dr-8f45at Firmware
Vendor
Cbc
Product
Dr-8h
Cbc
Dr-8h
Vendor
Cbc
Product
Dr-8h Firmware
Cbc
Dr-8h Firmware
Vendor
Cbc
Product
Dr-8m52-av
Cbc
Dr-8m52-av
Vendor
Cbc
Product
Dr-8m52-av Firmware
Cbc
Dr-8m52-av Firmware
Vendor
Cbc
Product
Drh8-4m41-a
Cbc
Drh8-4m41-a
Vendor
Cbc
Product
Drh8-4m41-a Firmware
Cbc
Drh8-4m41-a Firmware
Vendor
Cbc
Product
Nr-16f82-16p
Cbc
Nr-16f82-16p
Vendor
Cbc
Product
Nr-16f82-16p Firmware
Cbc
Nr-16f82-16p Firmware
Vendor
Cbc
Product
Nr-16f85-8pra
Cbc
Nr-16f85-8pra
Vendor
Cbc
Product
Nr-16f85-8pra Firmware
Cbc
Nr-16f85-8pra Firmware
Vendor
Cbc
Product
Nr-16m
Cbc
Nr-16m
Vendor
Cbc
Product
Nr-16m Firmware
Cbc
Nr-16m Firmware
Vendor
Cbc
Product
Nr-4f
Cbc
Nr-4f
Vendor
Cbc
Product
Nr-4f Firmware
Cbc
Nr-4f Firmware
Vendor
Cbc
Product
Nr-8f
Cbc
Nr-8f
Vendor
Cbc
Product
Nr-8f Firmware
Cbc
Nr-8f Firmware
Vendor
Cbc
Product
Nr16h
Cbc
Nr16h
Vendor
Cbc
Product
Nr16h Firmware
Cbc
Nr16h Firmware
Vendor
Cbc
Product
Nr4h
Cbc
Nr4h
Vendor
Cbc
Product
Nr4h Firmware
Cbc
Nr4h Firmware
Vendor
Cbc
Product
Nr8-4m71
Cbc
Nr8-4m71
Vendor
Cbc
Product
Nr8-4m71 Firmware
Cbc
Nr8-4m71 Firmware
Vendor
Cbc
Product
Nr8-8m72
Cbc
Nr8-8m72
Vendor
Cbc
Product
Nr8-8m72 Firmware
Cbc
Nr8-8m72 Firmware
Vendor
Cbc
Product
Nr8h
Cbc
Nr8h
Vendor
Cbc
Product
Nr8h Firmware
Cbc
Nr8h Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
