Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2023-28810

Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending s

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hikvision

Description

Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

hikvision DS-K1T804AXX

  • V1.4.0_build221212 to < V1.4.0_build221212affected

hikvision DS-K1T341AXX

  • V3.2.30_build221223 to < V3.2.30_build221223affected

hikvision DS-K1T671XXX

  • V3.2.30_build221223 to < V3.2.30_build221223affected

hikvision DS-K1T343XXX

  • V3.14.0_build230117 to < V3.14.0_build230117affected

hikvision DS-K1T341C

  • V3.3.8_build230112 to < V3.3.8_build230112affected

hikvision DS-K1T320XXX

  • V3.5.0_build220706 to < V3.5.0_build220706affected

hikvision DS-KH63 Series,DS-KH85 Series

  • V2.2.8_build230219 to < V2.2.8_build230219affected

hikvision DS-KH9310-WTE1(B),DS-KH9510-WTE1(B)

  • V2.1.76_build230204 to < V2.1.76_build230204affected

References