CVE-2023-3704

Published: Aug 24, 2023Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

The vulnerability exists in CP-Plus DVR due to an improper input validation within the web-based management interface of the affected products. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable device. Successful exploitation of this vulnerability could allow the remote attacker to change system time of the targeted device.

Affected (9)

Products: Cpplusworld: Cp Uvr 1601e1 Hc Firmware, Cp Uvr 0401l1 4kh Firmware, Cp Uvr 0401l1b 4kh Firmware, Cp Uvr 0801f1 Hc Firmware, Cp Uvr 0801k1 H Firmware, Cp Uvr 0801k1b H Firmware, Cp Uvr 0808k1 H Firmware, Cp Uvr 1601e1 H Firmware, Cp Uvr 1601e2 H Firmware

Cpplusworld

9 products

Cp Uvr 1601e1 Hc Firmware

Cp Uvr 0401l1 4kh Firmware

Cp Uvr 0401l1b 4kh Firmware

Cp Uvr 0801f1 Hc Firmware

Cp Uvr 0801k1 H Firmware

Cp Uvr 0801k1b H Firmware

Cp Uvr 0808k1 H Firmware

Cp Uvr 1601e1 H Firmware

Cp Uvr 1601e2 H Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cpplusworld Cp Uvr 1601e1 Hc Firmware	Before 4.000.00at008.0.0.r20230302

Running on/with	Platform Versions
Cpplusworld Cp Uvr 1601e1 Hc	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cpplusworld Cp Uvr 0401l1 4kh Firmware	Before 4.000.00at008.0.0.r20230302

Running on/with	Platform Versions
Cpplusworld Cp Uvr 0401l1 4kh	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cpplusworld Cp Uvr 0401l1b 4kh Firmware	Before 4.000.00at008.0.0.r20230302

Running on/with	Platform Versions
Cpplusworld Cp Uvr 0401l1b 4kh	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cpplusworld Cp Uvr 0801f1 Hc Firmware	Before 4.000.00at008.0.0.r20230302

Running on/with	Platform Versions
Cpplusworld Cp Uvr 0801f1 Hc	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cpplusworld Cp Uvr 0801k1 H Firmware	Before 4.000.00at008.0.0.r20230302

Running on/with	Platform Versions
Cpplusworld Cp Uvr 0801k1 H	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cpplusworld Cp Uvr 0801k1b H Firmware	Before 4.000.00at008.0.0.r20230302

Running on/with	Platform Versions
Cpplusworld Cp Uvr 0801k1b H	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cpplusworld Cp Uvr 0808k1 H Firmware	Before 4.000.00at008.0.0.r20230302

Running on/with	Platform Versions
Cpplusworld Cp Uvr 0808k1 H	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cpplusworld Cp Uvr 1601e1 H Firmware	Before 4.000.00at008.0.0.r20230302

Running on/with	Platform Versions
Cpplusworld Cp Uvr 1601e1 H	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cpplusworld Cp Uvr 1601e2 H Firmware	Before 4.000.00at008.0.0.r20230302

Running on/with	Platform Versions
Cpplusworld Cp Uvr 1601e2 H	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0240

Source: vdisclose@cert-in.org.in

Vendor Advisory

https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2023-0240

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.