CVE-2023-28810

Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.

Affected

hikvision · DS-K1T804AXX · DS-K1T341AXX · DS-K1T671XXX · DS-K1T343XXX · DS-K1T341C · DS-K1T320XXX

CVSS v3.1 NVD

4.3 MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS

10.40% chance of exploitation in the next 30 days, 96th percentile

Published

2023-06-15

Updated

2024-12-12

Proof-of-concept exploits (1)

• skylightcyber/CVE-2023-288100★ · 2023-06-19

Security advisories

• https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabili…

References

• CVE Record
• NVD entry