Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2023-40158: DigiMaster/PixelMaster Security Notice: News Releases

Hidden functionality vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series and DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41 series are no longer supported, therefore updates for those products are not provided.

CVE
#vulnerability#auth

PRODUCT NOTICE

Important Notice to our Customers

August 8, 2023, Cary, NC – CBC AMERICA announced today that internal tests have found that the following devices are potentially vulnerable to malicious attacks on the user management module of the recorders and are no longer suitable for connection to the Internet:

  • NR4H, NR8H, NR16H Series
  • DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41 Series

For customers using models other than those mentioned, we strongly recommend constantly updating your device to the latest firmware to enhance security and improve performance.

If you have any additional questions, please contact us.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907