{"id":"CVE-2023-6096","state":"PUBLISHED","title":"using a inappropriate encryption logic","description":"\nVladimir Kononovich, a Security Researcher has found a flaw that using a inappropriate encryption logic on the DVR. firmware encryption is broken and allows to decrypt. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.\n\n","publishedAt":"2024-04-26T07:16:12.080Z","updatedAt":"2024-08-02T08:21:17.318Z","severity":{"score":7.4,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","source":"Hanwha_Vision"},"assigner":"Hanwha_Vision","products":["Hanwha Vision Co., Ltd. HRX-1620"],"affected":[{"vendor":"Hanwha Vision Co., Ltd.","product":"HRX-1620","defaultStatus":"unaffected","versions":[{"version":"3.05.62 and prior versions","status":"affected"}]}],"references":["https://www.hanwhavision.com/wp-content/uploads/2024/04/NVR-DVR-Vulnerability-Report-CVE-2023-6095-6096.pdf"],"weaknesses":["CWE-668"],"ingestedAt":"2026-10-29T20:06:42.242Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/6xxx/CVE-2023-6096.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-6096","state":"PUBLISHED","datePublished":"2024-04-26T07:16:12.080Z","dateUpdated":"2024-08-02T08:21:17.318Z","assignerShortName":"Hanwha_Vision","assignerOrgId":"fc9afe74-3f80-4fb7-a313-e6f036a89882","dateReserved":"2023-11-13T09:07:04.294Z"},"containers":{"cna":{"title":"using a inappropriate encryption logic","descriptions":[{"lang":"en","value":"\nVladimir Kononovich, a Security Researcher has found a flaw that using a inappropriate encryption logic on the DVR. firmware encryption is broken and allows to decrypt. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.\n\n"}],"affected":[{"vendor":"Hanwha Vision Co., Ltd.","product":"HRX-1620","defaultStatus":"unaffected","versions":[{"version":"3.05.62 and prior versions","status":"affected"}]}],"references":[{"url":"https://www.hanwhavision.com/wp-content/uploads/2024/04/NVR-DVR-Vulnerability-Report-CVE-2023-6095-6096.pdf"}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-668","description":"CWE-668 Exposure of Resource to Wrong Sphere","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Hanwha_Vision","orgId":"fc9afe74-3f80-4fb7-a313-e6f036a89882","dateUpdated":"2024-04-26T07:16:12.080Z"},"datePublic":"2024-04-26T07:08:00.000Z","source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"hanwhavision","product":"xrn-2010","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}],"cpes":["cpe:2.3:a:hanwhavision:xrn-2010:*:*:*:*:*:*:*:*"]},{"vendor":"hanwhavision","product":"xrn-2010a","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}],"cpes":["cpe:2.3:a:hanwhavision:xrn-2010a:*:*:*:*:*:*:*:*"]},{"vendor":"hanwhavision","product":"xrn-2011","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}],"cpes":["cpe:2.3:a:hanwhavision:xrn-2011:*:*:*:*:*:*:*:*"]},{"vendor":"hanwhavision","product":"xrn-2010","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}],"cpes":["cpe:2.3:a:hanwhavision:xrn-2010:*:*:*:*:*:*:*:*"]},{"vendor":"hanwhavision","product":"xrn-2010a","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}],"cpes":["cpe:2.3:a:hanwhavision:xrn-2010a:*:*:*:*:*:*:*:*"]},{"vendor":"hanwhavision","product":"xrn-2011","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}],"cpes":["cpe:2.3:a:hanwhavision:xrn-2011:*:*:*:*:*:*:*:*"]},{"vendor":"hanwhavision","product":"xrn-2011a","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}],"cpes":["cpe:2.3:a:hanwhavision:xrn-2011a:*:*:*:*:*:*:*:*"]},{"vendor":"hanwhavision","product":"xrn-3010a","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}],"cpes":["cpe:2.3:h:hanwhavision:xrn-3010a:*:*:*:*:*:*:*:*"]},{"vendor":"hanwhavision","product":"arn-3250","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}],"cpes":["cpe:2.3:h:hanwhavision:arn-3250:*:*:*:*:*:*:*:*"]},{"vendor":"hanwhavision","product":"xrn-810s","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}],"cpes":["cpe:2.3:h:hanwhavision:xrn-810s:*:*:*:*:*:*:*:*"]},{"vendor":"hanwhavision","product":"xrn-410s","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}],"cpes":["cpe:2.3:h:hanwhavision:xrn-410s:*:*:*:*:*:*:*:*"]},{"vendor":"hanwhavision","product":"qrn-810","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}],"cpes":["cpe:2.3:h:hanwhavision:qrn-810:*:*:*:*:*:*:*:*"]},{"vendor":"hanwhavision","product":"qrn-410","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}],"cpes":["cpe:2.3:h:hanwhavision:qrn-410:*:*:*:*:*:*:*:*"]},{"vendor":"hanwhavision","product":"hrx-1621","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}],"cpes":["cpe:2.3:h:hanwhavision:hrx-1621:*:*:*:*:*:*:*:*"]},{"vendor":"hanwhavision","product":"hrx-1620","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}],"cpes":["cpe:2.3:h:hanwhavision:hrx-1620:*:*:*:*:*:*:*:*"]},{"vendor":"hanwhavision","product":"hrx-821","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}],"cpes":["cpe:2.3:h:hanwhavision:hrx-821:*:*:*:*:*:*:*:*"]},{"vendor":"hanwhavision","product":"hrx-820","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}],"cpes":["cpe:2.3:h:hanwhavision:hrx-820:*:*:*:*:*:*:*:*"]},{"vendor":"hanwhavision","product":"hrx-421","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}],"cpes":["cpe:2.3:h:hanwhavision:hrx-421:*:*:*:*:*:*:*:*"]},{"vendor":"hanwhavision","product":"hrx-420","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}],"cpes":["cpe:2.3:h:hanwhavision:hrx-420:*:*:*:*:*:*:*:*"]},{"vendor":"hanwhavision","product":"xrn-420s","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}],"cpes":["cpe:2.3:h:hanwhavision:xrn-420s:*:*:*:*:*:*:*:*"]},{"vendor":"hanwhavision","product":"qrn-430s","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}],"cpes":["cpe:2.3:h:hanwhavision:qrn-430s:*:*:*:*:*:*:*:*"]},{"vendor":"hanwhavision","product":"qrn-430s","defaultStatus":"unknown","versions":[{"version":"*","status":"affected"}],"cpes":["cpe:2.3:h:hanwhavision:qrn-430s:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-6096","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-04-26T16:12:56.278086Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-04T17:16:54.886Z"}},{"title":"CVE Program Container","references":[{"url":"https://www.hanwhavision.com/wp-content/uploads/2024/04/NVR-DVR-Vulnerability-Report-CVE-2023-6095-6096.pdf","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T08:21:17.318Z"}}]}}}