CVE-2023-28809: High severity hikvision ds-k1t320efwx vulnerability
Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in. To exploit the vulnerability, attackers have to request the session ID at the same time as a valid user logs in, and gain device operation permissions by forging the IP and session ID of an authenticated user.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the vulnerability ID for this session hijacking vulnerability?
The vulnerability ID for this session hijacking vulnerability is CVE-2023-28809.
What is the severity of CVE-2023-28809?
The severity of CVE-2023-28809 is high.
Which access control products are affected by CVE-2023-28809?
Hikvision Ds-k1t320efwx Firmware and other related products are affected by CVE-2023-28809.
How does CVE-2023-28809 work?
CVE-2023-28809 allows attackers to perform a session hijacking attack by exploiting the lack of session ID update after a successful login.
Are there any references for CVE-2023-28809?
Yes, you can find more information about CVE-2023-28809 at the following links: [Packet Storm Security](http://packetstormsecurity.com/files/174506/Hikvision-Access-Control-Session-Hijacking.html) and [Hikvision Support](https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-access-control-intercom/).