.. / CVE-2023-38433

• Auth Bypass
• Nuclei
• Web

Exploit for Fujitsu IP Series - Hardcoded Credentials (CVE-2023-38433)

Description:

Fujitsu Real-time Video Transmission Gear “IP series” use hard-coded credentials, which may allow a remote unauthenticated attacker to initialize or reboot the products, and as a result, terminate the video transmission. The credentials cannot be changed by the end-user and provide administrative access to the devices.

Nuclei Template

View the template here CVE-2023-38433.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2023/CVE-2023-38433.yaml

References: