Access Control Flaw in Hikvision Hybrid SAN/Cluster Storage

CVE-2023-28808

What is CVE-2023-28808?

Certain models of Hikvision Hybrid SAN/Cluster Storage devices are affected by an access control vulnerability. This flaw allows unauthorized users to gain administrative permissions by sending specially crafted messages to these devices. This could lead to potential unauthorized access and manipulation of sensitive data stored on the affected systems. It is crucial for users to remain vigilant and apply necessary security patches to mitigate this risk.

References