CVE-2023-28810mediumCWE-284

CVE-2023-28810: medium-severity vulnerability in hikvision DS-K1T320XXX

Published · Updated

Follow this CVE+ Monitor DS-K1T341C+ Monitor DS-K1T320XXX

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

18Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 10%
Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected products
hikvision · DS-K1T320XXXhikvision · DS-K1T341AXXhikvision · DS-K1T341Chikvision · DS-K1T343XXXhikvision · DS-K1T671XXXhikvision · DS-K1T804AXXhikvision · DS-KH63 Series,DS-KH85 Serieshikvision · DS-KH9310-WTE1(B),DS-KH9510-WTE1(B)
Related CVEs — hikvision DS-K1T320XXX

In the same product, most dangerous first.

CVE-2023-28809HIGHCVE-2023-28809EPSS 0.6%