CVE-2023-28808

· CRITICALModified

← All CVEs

CVSS v3.1

9.1

EPSS

0.83%

Published

Apr 11, 2023

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the admin permission. The attacker can exploit the vulnerability by sending crafted messages to the affected devices.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weaknesses (CWE)

CWE-284

Affected Products (24)

hikvision · ds-a71024_firmwarevulnerable

hikvision · ds-a71024

hikvision · ds-a71048_firmwarevulnerable

hikvision · ds-a71048

hikvision · ds-a71072r_firmwarevulnerable

hikvision · ds-a71072r

hikvision · ds-a80624s_firmwarevulnerable

hikvision · ds-a80624s

hikvision · ds-a81016s_firmwarevulnerable

hikvision · ds-a81016s

hikvision · ds-a72024_firmwarevulnerable

hikvision · ds-a72024

hikvision · ds-a72072r_firmwarevulnerable

hikvision · ds-a72072r

hikvision · ds-a80316s_firmwarevulnerable

hikvision · ds-a80316s

hikvision · ds-a82024d_firmwarevulnerable

hikvision · ds-a82024d

hikvision · ds-a71024_firmwarevulnerable

hikvision · ds-a71024

hikvision · ds-a71048r-cvs_firmwarevulnerable

hikvision · ds-a71048r-cvs

hikvision · ds-a72072r_firmwarevulnerable

hikvision · ds-a72072r

References (2)

https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-hybrid-san-cluster-stor/

Vendor Advisory

https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-hybrid-san-cluster-stor/

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs