CVE-2023-28810
medium · 4.3Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.
4.3
CVSS
10.4%
EPSS (exploit prob.)
96th
EPSS percentile
2023-06-15
Published
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-284
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| hikvision | ds-k1t804af_firmware | <= 1.4.0_build221212 |
| hikvision | ds-k1t804af | all versions |
| hikvision | ds-k1t804amf_firmware | <= 1.4.0_build221212 |
| hikvision | ds-k1t804amf | all versions |
| hikvision | ds-k1t341am_firmware | <= 3.2.30_build221223 |
| hikvision | ds-k1t341am | all versions |
| hikvision | ds-k1t341amf_firmware | <= 3.2.30_build221223 |
| hikvision | ds-k1t341amf | all versions |
| hikvision | ds-k1t671m_firmware | <= 3.2.30_build221223 |
| hikvision | ds-k1t671m | all versions |
| hikvision | ds-k1t671mf_firmware | <= 3.2.30_build221223 |
| hikvision | ds-k1t671mf | all versions |
| hikvision | ds-k1t671_firmware | <= 3.2.30_build221223 |
| hikvision | ds-k1t671 | all versions |
| hikvision | ds-k1t343efwx_firmware | <= 3.14.0_build230117 |
| hikvision | ds-k1t343efwx | all versions |
| hikvision | ds-k1t343efx_firmware | <= 3.14.0_build230117 |
| hikvision | ds-k1t343efx | all versions |
| hikvision | ds-k1t343ewx_firmware | <= 3.14.0_build230117 |
| hikvision | ds-k1t343ewx | all versions |
| hikvision | ds-k1t343ex_firmware | <= 3.14.0_build230117 |
| hikvision | ds-k1t343ex | all versions |
| hikvision | ds-k1t343mfwx_firmware | <= 3.14.0_build230117 |
| hikvision | ds-k1t343mfwx | all versions |
| hikvision | ds-k1t343mfx_firmware | <= 3.14.0_build230117 |
| hikvision | ds-k1t343mfx | all versions |
| hikvision | ds-k1t343mwx_firmware | <= 3.14.0_build230117 |
| hikvision | ds-k1t343mwx | all versions |
| hikvision | ds-k1t343mx_firmware | <= 3.14.0_build230117 |
| hikvision | ds-k1t343mx | all versions |
| hikvision | ds-k1t341c_firmware | <= 3.3.8_build230112 |
| hikvision | ds-k1t341c | all versions |
| hikvision | ds-k1t320efwx_firmware | <= 3.5.0_build220706 |
| hikvision | ds-k1t320efwx | all versions |
| hikvision | ds-k1t320efx_firmware | <= 3.5.0_build220706 |
| hikvision | ds-k1t320efx | all versions |
| hikvision | ds-k1t320ewx_firmware | <= 3.5.0_build220706 |
| hikvision | ds-k1t320ewx | all versions |
| hikvision | ds-k1t320ex_firmware | <= 3.5.0_build220706 |
| hikvision | ds-k1t320ex | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2023-28810