Riskcovery

CVE-2023-28811

State
Published
Severity
7.4 High
Published
Nov 23, 2023
Updated
Aug 2, 2024
Reserved
Mar 23, 2023

Read the record on cve.org

Description

There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.

Scores

CVSSScoreVectorSource
3.17.4 HighCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:Hhikvision

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
iDS-EXXHUHHikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
DS-EXXHGHHikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
iDS-EXXHQHHikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
DVR-EXXHUHHikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
DVR-EXXHGHHikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
DVR-EXXHQHHikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
iDS-72XXHQH-M(C)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
iDS-72XXHUH-M(C)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
iDS-72XXHQH-M(E)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
iDS-72XXHUH-M(E)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
iDS-72XXHTH-M(C)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
HW-HWD-72XXMH-G4Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
HW-HWD-62XXMH-G4Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
HL-DVR-216Q-K2(E)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
DS-71XXHGH-M(C)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
DS-72XXHGH-M(C)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
DS-71XXHGH-K(S)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
DS-72XXHGH-K(S)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
HL-DVR-1XXG-K(S)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
HL-DVR-2XXG-K(S)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
HL-DVR-1XXG-M(C)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
HL-DVR-2XXG-M(C)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
HW-HWD-51XXH(S)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
HW-HWD-51XXH-GHikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
HW-HWD-51XXMH-GHikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
iDS-71xxHQH-M(C)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
iDS-71xxHQH-M(E)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
iDS-72xxHQH-M/E(C)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
iDS-72xxHQH-M/E(E)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
HL-DVR-2XXQ-M(C)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
HL-DVR-2XXQ-M(E)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
HW-HWD-61XXMH-G4Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
HW-HWD-61XXMH-G4(E)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
iDS-71xxHUH-M(C)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
iDS-72xxHUH-M/E(C)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
iDS-71xxHUH-M(E)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
iDS-72xxHUH-M/E(E)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
HL-DVR-2XXU-M(C)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
HL-DVR-2XXU-M(E)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
HW-HWD-71XXMH-G4Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
HW-HWD-71XXMH-G4(E)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
NVR-2xxMH-C(D)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
NVR-1xxMH-C(D)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
HW-HWN-42xxMH(D)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
HW-HWN-41xxMH(D)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
DS-71xxNI-Q1(C)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
DS-71xxNI-Q1(D)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
HL-NVR-1xxMH-D(C)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
HL-NVR-1xxMH-D(D)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
HW-HWN-21xxMH(C)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
HW-HWN-21xxMH(D)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
DS-76xxNI-Q1(C)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
DS-76xxNI-Q2(C)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
DS-76xxNI-K1(C)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
HW-HWN-41xxMH(C)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
HW-HWN-42xxMH(C)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
HL-NVR-1xxMH-C(C)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
HL-NVR-2xxMH-C(C)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected
DS-77xxNI-I4(B)Hikvision
  • Build date before 230821(Version before V4.1.60 are not affected)Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.