CVE-2023-28810

CVSS 4.3 MEDIUMEPSS 10.4%CWE-284

Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Affected products

hikvision · DS-K1T320XXX hikvision · DS-K1T341AXX hikvision · DS-K1T341C hikvision · DS-K1T343XXX hikvision · DS-K1T671XXX hikvision · DS-K1T804AXX hikvision · DS-KH63 Series,DS-KH85 Series hikvision · DS-KH9310-WTE1(B),DS-KH9510-WTE1(B)

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-access-control-intercom/