High severity · published Jul 26, 2023
CVE-2023-38433
Fujitsu Real-time Video Transmission Gear "IP series" use hard-coded credentials, which may allow a remote unauthenticated attacker to initialize or reboot the products, and as a…
7.5
CVSS
3.7%
EPSS
No
On KEV
Description
Fujitsu Real-time Video Transmission Gear "IP series" use hard-coded credentials, which may allow a remote unauthenticated attacker to initialize or reboot the products, and as a result, terminate the video transmission. Affected products and versions are as follows: IP-HE950E firmware versions V01L001 to V01L053, IP-HE950D firmware versions V01L001 to V01L053, IP-HE900E firmware versions V01L001 to V01L010, IP-HE900D firmware versions V01L001 to V01L004, IP-900E / IP-920E firmware versions V01L001 to V02L061, IP-900D / IP-900ⅡD / IP-920D firmware versions V01L001 to V02L061, IP-90 firmware versions V01L001 to V01L013, and IP-9610 firmware versions V01L001 to V02L007.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.7% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IF
Ip-90 Firmware · Fujitsu
v01l001 through v01l013 · source: NVD
IF
Ip-900d Firmware · Fujitsu
v01l001 through v02l061 · source: NVD
IF
Ip-900e Firmware · Fujitsu
v01l001 through v02l061 · source: NVD
IF
Ip-900iid Firmware · Fujitsu
v01l001 through v02l061 · source: NVD
IF
Ip-920d Firmware · Fujitsu
v01l001 through v02l061 · source: NVD
IF
Ip-920e Firmware · Fujitsu
v01l001 through v02l061 · source: NVD
IF
Ip-9610 Firmware · Fujitsu
v01l001 through v02l007 · source: NVD
IF
Ip-he900d Firmware · Fujitsu
v01l001 through v01l004 · source: NVD
IF
Ip-he900e Firmware · Fujitsu
v01l001 through v01l010 · source: NVD
IF
Ip-he950d Firmware · Fujitsu
v01l001 through v01l053 · source: NVD
IF
Ip-he950e Firmware · Fujitsu
v01l001 through v01l053 · source: NVD