CVE-2023-38585: Cbc Dr-16f42a Firmware

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Improper authentication vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series and DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41 series are no longer supported, therefore updates for those products are not provided.

Affected products

• Cbc Dr-16f42a Firmware: affected versions not specified
• Cbc Dr-16f45at Firmware: affected versions not specified
• Cbc Dr-16h Firmware: affected versions not specified
• Cbc Dr-16m52-AV Firmware: affected versions not specified
• Cbc Dr-16m52 Firmware: affected versions not specified
• Cbc Dr-4fx1 Firmware: affected versions not specified
• Cbc Dr-4h Firmware: affected versions not specified
• Cbc Dr-4m51-AV Firmware: affected versions not specified
• Cbc Dr-8f42a Firmware: affected versions not specified
• Cbc Dr-8f45at Firmware: affected versions not specified
• Cbc Dr-8h Firmware: affected versions not specified
• Cbc Dr-8m52-AV Firmware: affected versions not specified
• Cbc DRH8-4m41-A Firmware: affected versions not specified
• Cbc Nr-16f82-16p Firmware: affected versions not specified
• Cbc Nr-16f85-8pra Firmware: affected versions not specified
• Cbc Nr-16m Firmware: affected versions not specified
• Cbc Nr-4f Firmware: affected versions not specified
• Cbc Nr-8f Firmware: affected versions not specified
• Cbc NR16H Firmware: affected versions not specified
• Cbc NR4H Firmware: affected versions not specified
• Cbc NR8-4m71 Firmware: affected versions not specified
• Cbc NR8-8m72 Firmware: affected versions not specified
• Cbc NR8H Firmware: affected versions not specified

Published 2023-08-23. Last modified 2026-06-17.