CVE-2023-6096
using a inappropriate encryption logic
- State
- Published
- Severity
- 7.4 High
- Published
- Apr 26, 2024
- Updated
- Aug 2, 2024
- Reserved
- Nov 13, 2023
Description
Vladimir Kononovich, a Security Researcher has found a flaw that using a inappropriate encryption logic on the DVR. firmware encryption is broken and allows to decrypt. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.4 High | CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H | Hanwha_Vision |
Weaknesses
- CWE-668 Exposure of Resource to Wrong Sphere
Affected Products
| Product | Versions |
|---|---|
HRX-1620Hanwha Vision Co., Ltd. |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.