Improper access control in Hikvision products - CVE-2023-28810
Published: October 13, 2023
Vulnerability identifier: #VU81992
CSH Severity: Low
CVSS v4: 5.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-28810
CWE-ID: CWE-284
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to improper access restrictions. A remote attacker on the local network can send specially crafted data packets to the vulnerable interface and modify device network configuration.
Affected software
DS-K1T320EFX
DS-K1T320MFX
DS-K1T671TMW
DS-K1T320MFWX
DS-K1T343EFWX
DS-K1T320EX
DS-K1T343EFX
DS-K1T320EWX
DS-K1T343EWX
DS-K1T671TMFW
DS-K1T343EX
DS-K1T320EFWX
DS-K1T343MFWX
DS-K1T341C
DS-K1T343MFX
DS-K1T343MX
DS-K1T343MWX
DS-K1T320MWX
DS-K1T671TM-3XF
DS-K1T320MX
DS-K1T671MF
DS-KH63 Series
DS-K1T671M
DS-KH85 Series
DS-K1T341AMF
DS-KH62 Series
DS-K1T341AM
DS-KH9310-WTE1(B)
DS-K1T804AMF
DS-KH9510-WTE1(B)
DS-K1T804AF
DS-K1T804AEF
DS-K1T320MFX
DS-K1T671TMW
DS-K1T320MFWX
DS-K1T343EFWX
DS-K1T320EX
DS-K1T343EFX
DS-K1T320EWX
DS-K1T343EWX
DS-K1T671TMFW
DS-K1T343EX
DS-K1T320EFWX
DS-K1T343MFWX
DS-K1T341C
DS-K1T343MFX
DS-K1T343MX
DS-K1T343MWX
DS-K1T320MWX
DS-K1T671TM-3XF
DS-K1T320MX
DS-K1T671MF
DS-KH63 Series
DS-K1T671M
DS-KH85 Series
DS-K1T341AMF
DS-KH62 Series
DS-K1T341AM
DS-KH9310-WTE1(B)
DS-K1T804AMF
DS-KH9510-WTE1(B)
DS-K1T804AF
DS-K1T804AEF
How to mitigate CVE-2023-28810
Install updates from vendor's website.
DS-K1T320EFX - update to 3.5.2 230829
DS-K1T320MFX - update to 3.5.2 230829
DS-K1T671TMW - update to 3.2.30 230330
DS-K1T320MFWX - update to 3.5.2 230829
DS-K1T343EFWX - update to 3.14.2 230802
DS-K1T320EX - update to 3.5.2 230829
DS-K1T343EFX - update to 3.14.2 230802
DS-K1T320EWX - update to 3.5.2 230829
DS-K1T343EWX - update to 3.14.2 230802
DS-K1T671TMFW - update to 3.2.30 230330
DS-K1T343EX - update to 3.14.2 230802
DS-K1T320EFWX - update to 3.5.2 230829
DS-K1T343MFWX - update to 3.14.2 230802
DS-K1T343MFX - update to 3.14.2 230802
DS-K1T343MX - update to 3.14.2 230802
DS-K1T343MWX - update to 3.14.2 230802
DS-K1T320MWX - update to 3.5.2 230829
DS-K1T671TM-3XF - update to 3.2.35 230804
DS-K1T320MX - update to 3.5.2 230829
DS-K1T671MF - update to 3.2.30 230330
DS-K1T671M - update to 3.2.30 230330
DS-K1T341AMF - update to 3.2.30 230330
DS-K1T341AM - update to 3.2.30 230330
DS-K1T804AMF - update to 1.4.0 230403
DS-K1T804AF - update to 1.4.0 230403
DS-K1T804AEF - update to 1.4.0 230403
DS-K1T320MFX - update to 3.5.2 230829
DS-K1T671TMW - update to 3.2.30 230330
DS-K1T320MFWX - update to 3.5.2 230829
DS-K1T343EFWX - update to 3.14.2 230802
DS-K1T320EX - update to 3.5.2 230829
DS-K1T343EFX - update to 3.14.2 230802
DS-K1T320EWX - update to 3.5.2 230829
DS-K1T343EWX - update to 3.14.2 230802
DS-K1T671TMFW - update to 3.2.30 230330
DS-K1T343EX - update to 3.14.2 230802
DS-K1T320EFWX - update to 3.5.2 230829
DS-K1T343MFWX - update to 3.14.2 230802
DS-K1T343MFX - update to 3.14.2 230802
DS-K1T343MX - update to 3.14.2 230802
DS-K1T343MWX - update to 3.14.2 230802
DS-K1T320MWX - update to 3.5.2 230829
DS-K1T671TM-3XF - update to 3.2.35 230804
DS-K1T320MX - update to 3.5.2 230829
DS-K1T671MF - update to 3.2.30 230330
DS-K1T671M - update to 3.2.30 230330
DS-K1T341AMF - update to 3.2.30 230330
DS-K1T341AM - update to 3.2.30 230330
DS-K1T804AMF - update to 1.4.0 230403
DS-K1T804AF - update to 1.4.0 230403
DS-K1T804AEF - update to 1.4.0 230403