CVEvulnerability
CVE-2023-28810
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-06-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- Weaknesses
- CWE-284
Description
Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.
Affected configurations
• hikvision ds-k1t804af firmware (<= 1.4.0 build221212)
• hikvision ds-k1t804amf firmware (<= 1.4.0 build221212)
• hikvision ds-k1t341am firmware (<= 3.2.30 build221223)
• hikvision ds-k1t341amf firmware (<= 3.2.30 build221223)
• hikvision ds-k1t671m firmware (<= 3.2.30 build221223)
• hikvision ds-k1t671mf firmware (<= 3.2.30 build221223)
• hikvision ds-k1t671 firmware (<= 3.2.30 build221223)
• hikvision ds-k1t343efwx firmware (<= 3.14.0 build230117)
• hikvision ds-k1t343efx firmware (<= 3.14.0 build230117)
• hikvision ds-k1t343ewx firmware (<= 3.14.0 build230117)
• hikvision ds-k1t343ex firmware (<= 3.14.0 build230117)
• hikvision ds-k1t343mfwx firmware (<= 3.14.0 build230117)
• hikvision ds-k1t343mfx firmware (<= 3.14.0 build230117)
• hikvision ds-k1t343mwx firmware (<= 3.14.0 build230117)
• hikvision ds-k1t343mx firmware (<= 3.14.0 build230117)
• hikvision ds-k1t341c firmware (<= 3.3.8 build230112)
• hikvision ds-k1t320efwx firmware (<= 3.5.0 build220706)
• hikvision ds-k1t320efx firmware (<= 3.5.0 build220706)
• hikvision ds-k1t320ewx firmware (<= 3.5.0 build220706)
• hikvision ds-k1t320ex firmware (<= 3.5.0 build220706)
• hikvision ds-k1t320mfwx firmware (<= 3.5.0 build220706)
• hikvision ds-k1t320mfx firmware (<= 3.5.0 build220706)
• hikvision ds-k1t320mwx firmware (<= 3.5.0 build220706)
• hikvision ds-k1t320mx firmware (<= 3.5.0 build220706)
• hikvision ds-kh6320-wte1 firmware (<= 2.2.8 build230219)
• hikvision ds-kh6350-wte1 firmware (<= 2.2.8 build230219)
• hikvision ds-kh6351-te1 firmware (<= 2.2.8 build230219)
• hikvision ds-kh6351-wte1 firmware (<= 2.2.8 build230219)
• hikvision ds-kh6320-le1 firmware (<= 2.2.8 build230219)
• hikvision ds-kh63le1\(b\) firmware (<= 2.2.8 build230219)
• hikvision ds-kh6320-tde1 firmware (<= 2.2.8 build230219)
• hikvision ds-kh6320-te1 firmware (<= 2.2.8 build230219)
• hikvision ds-kh6320-wtde1 firmware (<= 2.2.8 build230219)
• hikvision ds-kh8520-wte1 firmware (<= 2.2.8 build230219)
• hikvision ds-kh6220-le1 firmware (<= 1.4.62 build220414)
• hikvision ds-kh9310-wte1\(b\) firmware (<= 2.1.76 build230204)
• hikvision ds-kh9510-wte1\(b\) firmware (<= 2.1.76 build230204)
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-access-control-intercom/ Vendor Advisory
- https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-access-control-intercom/ Vendor Advisory