What’s Vulnerable › Vulnerabilities

CVE-2023-2504

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-05-22 · updated 2026-06-17
• Weakness: CWE-798

Description

Files present on firmware images could allow an attacker to gain unauthorized access as a root user using hard-coded credentials.

Affected products

• BirdDog 4K Quad Firmware: 4.5.181, 4.5.196
• BirdDog A300 Firmware: 3.4
• BirdDog Mini Firmware: 2.6.2
• BirdDog Studio R3 Firmware: 3.6.4

References

• https://birddog.tv/downloads/
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-11
• https://birddog.tv/downloads/
• https://www.cisa.gov/news-events/ics-advisories/icsa-23-131-11

Get alerted when CVE-2023-2504 or the next vulnerability affects your stack