CVE-2023-6096

using a inappropriate encryption logic

State
Published
Severity
7.4 High
Published
Apr 26, 2024
Updated
Aug 2, 2024
Reserved
Nov 13, 2023

Read the record on cve.org

Description

Vladimir Kononovich, a Security Researcher has found a flaw that using a inappropriate encryption logic on the DVR. firmware encryption is broken and allows to decrypt. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

Scores

CVSSScoreVectorSource
3.17.4 HighCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HHanwha_Vision

Weaknesses

  • CWE-668 Exposure of Resource to Wrong Sphere

Affected Products

ProductVersions
HRX-1620Hanwha Vision Co., Ltd.
  • 3.05.62 and prior versionsAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.