CVE-2023-38433: Fujitsu IP-900d Firmware

High severity, CVSS 7.5. EPSS: 3.7% chance of exploitation in the next 30 days.

Fujitsu Real-time Video Transmission Gear "IP series" use hard-coded credentials, which may allow a remote unauthenticated attacker to initialize or reboot the products, and as a result, terminate the video transmission. Affected products and versions are as follows: IP-HE950E firmware versions V01L001 to V01L053, IP-HE950D firmware versions V01L001 to V01L053, IP-HE900E firmware versions V01L001 to V01L010, IP-HE900D firmware versions V01L001 to V01L004, IP-900E / IP-920E firmware versions V01L001 to V02L061, IP-900D / IP-900ⅡD / IP-920D firmware versions V01L001 to V02L061, IP-90 firmware versions V01L001 to V01L013, and IP-9610 firmware versions V01L001 to V02L007.

Affected products

• Fujitsu IP-900d Firmware: from v01l001, up to and including v02l061
• Fujitsu IP-900e Firmware: from v01l001, up to and including v02l061
• Fujitsu IP-900iid Firmware: from v01l001, up to and including v02l061
• Fujitsu IP-90 Firmware: from v01l001, up to and including v01l013
• Fujitsu IP-920d Firmware: from v01l001, up to and including v02l061
• Fujitsu IP-920e Firmware: from v01l001, up to and including v02l061
• Fujitsu IP-9610 Firmware: from v01l001, up to and including v02l007
• Fujitsu IP-HE900D Firmware: from v01l001, up to and including v01l004
• Fujitsu IP-HE900E Firmware: from v01l001, up to and including v01l010
• Fujitsu IP-HE950D Firmware: from v01l001, up to and including v01l053
• Fujitsu IP-HE950E Firmware: from v01l001, up to and including v01l053

Published 2023-07-26. Last modified 2026-06-17.