漏洞描述
Fujitsu Real-time Video Transmission Gear “IP series” use hard-coded credentials, which may allow a remote unauthenticated attacker to initialize or reboot the products, and as a result, terminate the video transmission. The credentials cannot be changed by the end-user and provide administrative access to the devices.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
www.praetorian.comhttps://www.praetorian.com/blog/fujitsu-ip-series-hard-coded-credentials↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2023-38433↗www.cisa.govhttps://www.cisa.gov/news-events/ics-advisories/icsa-23-248-01↗www.fujitsu.comhttps://www.fujitsu.com/global/products/computing/peripheral/video/download↗jvn.jphttps://jvn.jp/en/jp/JVN95727578↗