Back to Database
Status published
Medium
CVE-2023-28810
Some access control/intercom products have unauthorized modification of device network...
Vulnerability Description
Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-28810
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Peter Szot
More from hikvision
View All →CVE-2023-28809
Some access control products are vulnerable to a session hijacking...
High
7.5
CVE-2023-28808
Some Hikvision Hybrid SAN/Cluster Storage products have an access control...
Critical
9.1
CVE-2022-28173
The web server of some Hikvision wireless bridge products have...
Critical
9.1
CVE-2022-28172
The web module in some Hikvision Hybrid SAN/Cluster Storage products...
Medium
6.5
CVE-2022-28171
The web module in some Hikvision Hybrid SAN/Cluster Storage products...
High
7.5
Affected Vendor
hikvision
View all reports →Affected Software
DS-K1T804AXX, DS-K1T341AXX, DS-K1T671XXX, DS-K1T343XXX, DS-K1T341C, DS-K1T320XXX, DS-KH63 Series,DS-KH85 Series, DS-KH9310-WTE1(B),DS-KH9510-WTE1(B)
Vulnerable Versions:
V1.4.0_build221212, V3.2.30_build221223, V3.14.0_build230117, V3.3.8_build230112, V3.5.0_build220706, V2.2.8_build230219, V2.1.76_build230204
Timeline
Official Publish:
June 15th, 2023
Last Modified:
December 12th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N