CVE-2023-28810

State: Published
Severity: 4.3 Medium
Published: Jun 15, 2023
Updated: Dec 12, 2024
Reserved: Mar 23, 2023

Description

Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.

Scores

CVSS	Score	Vector	Source
3.1	4.3 Medium	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	hikvision

Weaknesses

CWE-284 Improper Access Control

Affected Products

Product	Versions
DS-K1T804AXXhikvision	V1.4.0_build221212 to before V1.4.0_build221212Affected
DS-K1T341AXXhikvision	V3.2.30_build221223 to before V3.2.30_build221223Affected
DS-K1T671XXXhikvision	V3.2.30_build221223 to before V3.2.30_build221223Affected
DS-K1T343XXXhikvision	V3.14.0_build230117 to before V3.14.0_build230117Affected
DS-K1T341Chikvision	V3.3.8_build230112 to before V3.3.8_build230112Affected
DS-K1T320XXXhikvision	V3.5.0_build220706 to before V3.5.0_build220706Affected
DS-KH63 Series,DS-KH85 Serieshikvision	V2.2.8_build230219 to before V2.2.8_build230219Affected
DS-KH9310-WTE1(B),DS-KH9510-WTE1(B)hikvision	V2.1.76_build230204 to before V2.1.76_build230204Affected

References

https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-access-control-intercom/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.