CVE-2023-28810: Medium severity hikvision ds-k1t804af vulnerability
Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-28810?
CVE-2023-28810 has a high severity due to the potential for attackers to modify device network configurations.
How do I fix CVE-2023-28810?
To mitigate CVE-2023-28810, ensure that your Hikvision device firmware is updated to a version that does not contain this vulnerability.
Which Hikvision products are affected by CVE-2023-28810?
CVE-2023-28810 affects several Hikvision access control and intercom products, specifically those with firmware versions up to 3.2.30_build221223 and earlier.
What happens if CVE-2023-28810 is exploited?
If CVE-2023-28810 is successfully exploited, attackers can gain unauthorized access and modify the network configuration of vulnerable devices.
Is there a specific patch for CVE-2023-28810?
Yes, Hikvision recommends applying the latest firmware updates, which include patches specifically targeting CVE-2023-28810.