CVE-2023-45801

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-12-13 · updated 2026-06-17
Weakness: CWE-287

Description

Improper Authentication vulnerability in Nadatel DVR allows Information Elicitation.This issue affects DVR: from 3.0.0 before 9.9.0.

Affected products

Nadatel At-0402E Firmware: from 3.0.0 before 9.9.0 — fixed in 9.9.0
Nadatel At-0402L Firmware: from 3.0.0 before 9.9.0 — fixed in 9.9.0
Nadatel At-0402M Firmware: from 3.0.0 before 9.9.0 — fixed in 9.9.0
Nadatel At-0402R Firmware: from 3.0.0 before 9.9.0 — fixed in 9.9.0
Nadatel At-0413M Firmware: from 3.0.0 before 9.9.0 — fixed in 9.9.0
Nadatel At-0413S Firmware: from 3.0.0 before 9.9.0 — fixed in 9.9.0
Nadatel At-0815E Firmware: from 3.0.0 before 9.9.0 — fixed in 9.9.0
Nadatel At-0815L Firmware: from 3.0.0 before 9.9.0 — fixed in 9.9.0
Nadatel At-0815M Firmware: from 3.0.0 before 9.9.0 — fixed in 9.9.0
Nadatel At-0815R Firmware: from 3.0.0 before 9.9.0 — fixed in 9.9.0
Nadatel At-0823M Firmware: from 3.0.0 before 9.9.0 — fixed in 9.9.0
Nadatel At-0823S Firmware: from 3.0.0 before 9.9.0 — fixed in 9.9.0
Nadatel At-1623E Firmware: from 3.0.0 before 9.9.0 — fixed in 9.9.0
Nadatel At-1623L Firmware: from 3.0.0 before 9.9.0 — fixed in 9.9.0
Nadatel At-1623M Firmware: from 3.0.0 before 9.9.0 — fixed in 9.9.0
Nadatel At-1623R Firmware: from 3.0.0 before 9.9.0 — fixed in 9.9.0
Nadatel At-1643M Firmware: from 3.0.0 before 9.9.0 — fixed in 9.9.0
Nadatel At-1643S Firmware: from 3.0.0 before 9.9.0 — fixed in 9.9.0

How to fix

Upgrade to a fixed version: Nadatel At-0402E Firmware 9.9.0; Nadatel At-0402L Firmware 9.9.0; Nadatel At-0402M Firmware 9.9.0; Nadatel At-0402R Firmware 9.9.0; Nadatel At-0413M Firmware 9.9.0; Nadatel At-0413S Firmware 9.9.0; Nadatel At-0815E Firmware 9.9.0; Nadatel At-0815L Firmware 9.9.0; Nadatel At-0815M Firmware 9.9.0; Nadatel At-0815R Firmware 9.9.0; Nadatel At-0823M Firmware 9.9.0; Nadatel At-0823S Firmware 9.9.0. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-45801 or the next vulnerability affects your stack