CVE-2023-28810 : Some access control/intercom products have unauthorized modification of device n

Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.

Published 2023-06-15 22:15:09

Updated 2023-06-30 16:39:21

Source Hangzhou Hikvision Digital Technology Co., Ltd.

View at NVD, CVE.org

Vulnerability category: BypassGain privilege

Products affected by CVE-2023-28810

Hikvision » Ds-k1t804af Firmware
Versions up to, including, (<=) 1.4.0_build221212
cpe:2.3:o:hikvision:ds-k1t804af_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-k1t804af » Version: N/A
Hikvision » Ds-k1t804amf Firmware
Versions up to, including, (<=) 1.4.0_build221212
cpe:2.3:o:hikvision:ds-k1t804amf_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-k1t804amf » Version: N/A
Hikvision » Ds-k1t341am Firmware
Versions up to, including, (<=) 3.2.30_build221223
cpe:2.3:o:hikvision:ds-k1t341am_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-k1t341am » Version: N/A
Hikvision » Ds-k1t341amf Firmware
Versions up to, including, (<=) 3.2.30_build221223
cpe:2.3:o:hikvision:ds-k1t341amf_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-k1t341amf » Version: N/A
Hikvision » Ds-k1t671m Firmware
Versions up to, including, (<=) 3.2.30_build221223
cpe:2.3:o:hikvision:ds-k1t671m_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-k1t671m » Version: N/A
Hikvision » Ds-k1t671mf Firmware
Versions up to, including, (<=) 3.2.30_build221223
cpe:2.3:o:hikvision:ds-k1t671mf_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-k1t671mf » Version: N/A
Hikvision » Ds-k1t671 Firmware
Versions up to, including, (<=) 3.2.30_build221223
cpe:2.3:o:hikvision:ds-k1t671_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-k1t671 » Version: N/A
Hikvision » Ds-k1t343efwx Firmware
Versions up to, including, (<=) 3.14.0_build230117
cpe:2.3:o:hikvision:ds-k1t343efwx_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-k1t343efwx » Version: N/A
Hikvision » Ds-k1t343efx Firmware
Versions up to, including, (<=) 3.14.0_build230117
cpe:2.3:o:hikvision:ds-k1t343efx_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-k1t343efx » Version: N/A
Hikvision » Ds-k1t343ewx Firmware
Versions up to, including, (<=) 3.14.0_build230117
cpe:2.3:o:hikvision:ds-k1t343ewx_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-k1t343ewx » Version: N/A
Hikvision » Ds-k1t343ex Firmware
Versions up to, including, (<=) 3.14.0_build230117
cpe:2.3:o:hikvision:ds-k1t343ex_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-k1t343ex » Version: N/A
Hikvision » Ds-k1t343mfwx Firmware
Versions up to, including, (<=) 3.14.0_build230117
cpe:2.3:o:hikvision:ds-k1t343mfwx_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-k1t343mfwx » Version: N/A
Hikvision » Ds-k1t343mfx Firmware
Versions up to, including, (<=) 3.14.0_build230117
cpe:2.3:o:hikvision:ds-k1t343mfx_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-k1t343mfx » Version: N/A
Hikvision » Ds-k1t343mwx Firmware
Versions up to, including, (<=) 3.14.0_build230117
cpe:2.3:o:hikvision:ds-k1t343mwx_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-k1t343mwx » Version: N/A
Hikvision » Ds-k1t343mx Firmware
Versions up to, including, (<=) 3.14.0_build230117
cpe:2.3:o:hikvision:ds-k1t343mx_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-k1t343mx » Version: N/A
Hikvision » Ds-k1t341c Firmware
Versions up to, including, (<=) 3.3.8_build230112
cpe:2.3:o:hikvision:ds-k1t341c_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-k1t341c » Version: N/A
Hikvision » Ds-k1t320efwx Firmware
Versions up to, including, (<=) 3.5.0_build220706
cpe:2.3:o:hikvision:ds-k1t320efwx_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-k1t320efwx » Version: N/A
Hikvision » Ds-k1t320efx Firmware
Versions up to, including, (<=) 3.5.0_build220706
cpe:2.3:o:hikvision:ds-k1t320efx_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-k1t320efx » Version: N/A
Hikvision » Ds-k1t320ewx Firmware
Versions up to, including, (<=) 3.5.0_build220706
cpe:2.3:o:hikvision:ds-k1t320ewx_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-k1t320ewx » Version: N/A
Hikvision » Ds-k1t320ex Firmware
Versions up to, including, (<=) 3.5.0_build220706
cpe:2.3:o:hikvision:ds-k1t320ex_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-k1t320ex » Version: N/A
Hikvision » Ds-k1t320mfwx Firmware
Versions up to, including, (<=) 3.5.0_build220706
cpe:2.3:o:hikvision:ds-k1t320mfwx_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-k1t320mfwx » Version: N/A
Hikvision » Ds-k1t320mfx Firmware
Versions up to, including, (<=) 3.5.0_build220706
cpe:2.3:o:hikvision:ds-k1t320mfx_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-k1t320mfx » Version: N/A
Hikvision » Ds-k1t320mwx Firmware
Versions up to, including, (<=) 3.5.0_build220706
cpe:2.3:o:hikvision:ds-k1t320mwx_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-k1t320mwx » Version: N/A
Hikvision » Ds-k1t320mx Firmware
Versions up to, including, (<=) 3.5.0_build220706
cpe:2.3:o:hikvision:ds-k1t320mx_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-k1t320mx » Version: N/A
Hikvision » Ds-kh6320-wte1 Firmware
Versions up to, including, (<=) 2.2.8_build230219
cpe:2.3:o:hikvision:ds-kh6320-wte1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-kh6320-wte1 » Version: N/A
Hikvision » Ds-kh6350-wte1 Firmware
Versions up to, including, (<=) 2.2.8_build230219
cpe:2.3:o:hikvision:ds-kh6350-wte1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-kh6350-wte1 » Version: N/A
Hikvision » Ds-kh6351-te1 Firmware
Versions up to, including, (<=) 2.2.8_build230219
cpe:2.3:o:hikvision:ds-kh6351-te1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-kh6351-te1 » Version: N/A
Hikvision » Ds-kh6351-wte1 Firmware
Versions up to, including, (<=) 2.2.8_build230219
cpe:2.3:o:hikvision:ds-kh6351-wte1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-kh6351-wte1 » Version: N/A
Hikvision » Ds-kh6320-le1 Firmware
Versions up to, including, (<=) 2.2.8_build230219
cpe:2.3:o:hikvision:ds-kh6320-le1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-kh6320-le1 » Version: N/A
Hikvision » Ds-kh63le1(b) Firmware
Versions up to, including, (<=) 2.2.8_build230219
cpe:2.3:o:hikvision:ds-kh63le1\(b\)_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-kh63le1(b) » Version: N/A
Hikvision » Ds-kh6320-tde1 Firmware
Versions up to, including, (<=) 2.2.8_build230219
cpe:2.3:o:hikvision:ds-kh6320-tde1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-kh6320-tde1 » Version: N/A
Hikvision » Ds-kh6320-te1 Firmware
Versions up to, including, (<=) 2.2.8_build230219
cpe:2.3:o:hikvision:ds-kh6320-te1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-kh6320-te1 » Version: N/A
Hikvision » Ds-kh6320-wtde1 Firmware
Versions up to, including, (<=) 2.2.8_build230219
cpe:2.3:o:hikvision:ds-kh6320-wtde1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-kh6320-wtde1 » Version: N/A
Hikvision » Ds-kh8520-wte1 Firmware
Versions up to, including, (<=) 2.2.8_build230219
cpe:2.3:o:hikvision:ds-kh8520-wte1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-kh8520-wte1 » Version: N/A
Hikvision » Ds-kh6220-le1 Firmware
Versions up to, including, (<=) 1.4.62_build220414
cpe:2.3:o:hikvision:ds-kh6220-le1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-kh6220-le1 » Version: N/A
Hikvision » Ds-kh9310-wte1(b) Firmware
Versions up to, including, (<=) 2.1.76_build230204
cpe:2.3:o:hikvision:ds-kh9310-wte1\(b\)_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-kh9310-wte1(b) » Version: N/A
Hikvision » Ds-kh9510-wte1(b) Firmware
Versions up to, including, (<=) 2.1.76_build230204
cpe:2.3:o:hikvision:ds-kh9510-wte1\(b\)_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Hikvision » Ds-kh9510-wte1(b) » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-28810

EPSS FAQ

1.37%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 79 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-28810

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.3	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	2.8	1.4	Hangzhou Hikvision Digital Technology Co., Ltd.
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: Low Availability: None
4.3	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	2.8	1.4	NIST
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: Low Availability: None

CWE ids for CVE-2023-28810

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Assigned by: hsrc@hikvision.com (Secondary)

References for CVE-2023-28810

https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-access-control-intercom/

Security Vulnerability in Some Hikvision Access Control/Intercom Products - Security Advisory - Hikvision
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2023-28810

Products affected by CVE-2023-28810

Exploit prediction scoring system (EPSS) score for CVE-2023-28810

CVSS scores for CVE-2023-28810

CWE ids for CVE-2023-28810

References for CVE-2023-28810