CVE-2023-40158
Hidden functionality vulnerability in the CBC products allows a remote authenticated attacker to...
Hidden functionality vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series and DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41 series are no longer supported, therefore updates for those products are not provided.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Hidden functionality vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series and DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41 series are no longer supported, therefore updates for those products are not provided.
- Record
CVE-2023-40158- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-912
- Updated
- 2026-11-02
CVE List
Hidden functionality vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series and DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41 series are no longer supported, therefore updates for those products are not provided.
- Record
CVE-2023-40158- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-912
- Updated
- 2026-11-02
EUVDEUVD-2023-44765
Hidden functionality vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series and DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41 series are no longer supported, therefore updates for those products are not provided.
- Record
EUVD-2023-44765- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-p4wm-4q6c-fc47
Hidden functionality vulnerability in the CBC products allows a remote authenticated attacker to...
Hidden functionality vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the device or alter its settings. As for the affected products/versions, see the detailed information provided by the vendor. Note that NR4H, NR8H, NR16H series and DR-16F, DR-8F, DR-4F, DR-16H, DR-8H, DR-4H, DR-4M41 series are no longer supported, therefore updates for those products are not provided.
- Record
GHSA-p4wm-4q6c-fc47- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-912
- Updated
- 2026-11-02
Affected products
- cbc dr-16f
- cbc dr-16h
- cbc dr-4f
- cbc dr-4h
- cbc dr-4m41
- cbc dr-8f
- cbc dr-8h
- cbc nr16h
- cbc nr4h
- cbc nr8h
- cbc dr-16f42a firmware
- cbc dr-16f45at firmware
Show 35 moreShow less
- cbc dr-16h firmware
- cbc dr-16m
- cbc dr-16m52-av firmware
- cbc dr-16m52 firmware
- cbc dr-4fx1 firmware
- cbc dr-4h firmware
- cbc dr-4m51
- cbc dr-4m51-av firmware
- cbc dr-8f42a firmware
- cbc dr-8f45at firmware
- cbc dr-8h firmware
- cbc dr-8m
- cbc dr-8m52-av firmware
- cbc drh8-4m41-a firmware
- cbc nr-16f
- cbc nr-16f82-16p firmware
- cbc nr-16f85-8pra firmware
- cbc nr-16m
- cbc nr-16m firmware
- cbc nr-4f
- cbc nr-4f firmware
- cbc nr-4m
- cbc nr-8f
- cbc nr-8f firmware
- cbc nr-8m
- cbc nr16h firmware
- cbc nr4h firmware
- cbc nr8-4m71 firmware
- cbc nr8-8m72 firmware
- cbc nr8h firmware
- cbc co.,ltd. dr-16f, dr-8f, dr-4f, dr-16h, dr-8h, dr-4h, dr-4m41 series
- cbc co.,ltd. nr4h, nr8h, nr16h series
- cbc co.,ltd. dr-16m, dr-8m, dr-4m51 series
- cbc co.,ltd. nr-4f, nr-8f, nr-16f series
- cbc co.,ltd. nr-4m, nr-8m, nr-16m series
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-40158 is a high vulnerability (CVSS 8.8) in Cbc Dr-16f, published August 23, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.28%, the 70th percentile. No source names a fixed version.