Cbc NR16H Firmware vulnerabilities

3 CVEs affecting Cbc NR16H Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-40144, published 2023-08-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-40144, published 2023-08-23. High severity, CVSS 8.8. EPSS: 2.1% chance of exploitation in the next 30 days. OS command injection vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected…
CVE-2023-40158, published 2023-08-23. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. Hidden functionality vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected…
CVE-2023-38585, published 2023-08-23. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. Improper authentication vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected…