Unauthorized Network Configuration Modification in Hikvision Access Control Products
CVE-2023-28810

4.3MEDIUM

Key Information:

Vendor

Hikvision

Status
Ds-k1t804axx
Ds-k1t341axx
Ds-k1t671xxx
Ds-k1t343xxx
Vendor
CVE Published:
15 June 2023

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 10%

What is CVE-2023-28810?

Certain Hikvision access control and intercom products exhibit vulnerabilities that allow attackers on the same local network to send specially crafted data packets. This exploit enables unauthorized modification of the device's network configuration, potentially compromising the integrity and security of the system and the network it operates on.

Affected Version(s)

DS-K1T320XXX V3.5.0_build220706

DS-K1T341AXX V3.2.30_build221223

DS-K1T341C V3.3.8_build230112

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2023-28810
Created by skylightcyber

References

https://www.hikvision.com/en/support/cybersecurity/securi...

EPSS Score

10% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Peter Szot
.