CVE-2023-28808

CVSS 9.1 CRITICALEPSS 0.8%CWE-284

Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the admin permission. The attacker can exploit the vulnerability by sending crafted messages to the affected devices.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products

hikvision · DS-A71024/48/72R,DS-A80624S,DS-A81016S,DS-A72024/72R,DS-A80316S,DS-A82024D hikvision · DS-A71024/48R-CVS,DS-A72024/48R-CVS

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-hybrid-san-cluster-stor/