CVE-2023-28808: Critical severity hikvision ds-a71024 vulnerability

Q: What is CVE-2023-28808?

CVE-2023-28808 is a vulnerability in some Hikvision Hybrid SAN/Cluster Storage products that allows an attacker to obtain admin permissions.

Q: How can the vulnerability in Hikvision Hybrid SAN/Cluster Storage products be exploited?

The vulnerability can be exploited by sending crafted messages to the affected devices.

Q: What is the severity of CVE-2023-28808?

The severity of CVE-2023-28808 is critical, with a CVSS score of 9.8.

Q: Which Hikvision Hybrid SAN/Cluster Storage products are affected by CVE-2023-28808?

Some Hikvision Hybrid SAN/Cluster Storage products with the following firmware versions are affected: DS-a71024, DS-a71048, DS-a71072r, DS-a80624s, DS-a81016s, DS-a72024, DS-a72072r, DS-a80316s, DS-a82024d.

Q: How can I fix CVE-2023-28808?

To fix CVE-2023-28808, update the firmware of the affected Hikvision Hybrid SAN/Cluster Storage products to version 2.3.8-8 or later.

Published Apr 11, 2023

Updated

Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the admin permission. The attacker can exploit the vulnerability by sending crafted messages to the affected devices.

Affected Software

22 affected components

Hikvision Ds-a71024 Firmware<=2.3.8-8

Hikvision Ds-a71024

Hikvision Ds-a71048 Firmware<=2.3.8-8

Hikvision Ds-a71048

Hikvision Ds-a71072r Firmware<=2.3.8-8

Hikvision Ds-a71072r

Hikvision Ds-a80624s Firmware<=2.3.8-8

Hikvision Ds-a80624s

Hikvision Ds-a81016s Firmware<=2.3.8-8

Hikvision Ds-a81016s

Hikvision Ds-a72024 Firmware<=2.3.8-8

Hikvision Ds-a72024

Hikvision Ds-a72072r Firmware

Hikvision Ds-a72072r

Hikvision Ds-a80316s Firmware<=2.3.8-8

Hikvision Ds-a80316s

Hikvision Ds-a82024d Firmware<=2.3.8-8

Hikvision Ds-a82024d

Hikvision Ds-a71024 Firmware<=1.1.4

Hikvision Ds-a71048r-cvs Firmware<=1.1.4

Hikvision Ds-a71048r-cvs

Hikvision Ds-a72072r Firmware<=2.3.8-8

Remediation

Information

https://www.hikvision.com/content/dam/hikvision/en/support/notice/security-notification-23-4-10/Fixing-Security-Vulnerability-of-Hybrid-SAN-230407.zip

Event History

Apr 11, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2023-28808?

CVE-2023-28808 is a vulnerability in some Hikvision Hybrid SAN/Cluster Storage products that allows an attacker to obtain admin permissions.

How can the vulnerability in Hikvision Hybrid SAN/Cluster Storage products be exploited?