CVE-2023-6895: Hikvision Intercom Broadcasting System ping.php os command injection

Q: What is the severity of CVE-2023-6895?

CVE-2023-6895 has been declared as critical.

Q: What impact does CVE-2023-6895 have on the Hikvision Intercom Broadcasting System?

CVE-2023-6895 allows for OS command injection through the manipulation of the jsondata[ip] argument.

Q: How do I fix CVE-2023-6895?

To fix CVE-2023-6895, update the Hikvision Intercom Broadcasting System to version 4.1.0 or higher.

Q: Which versions of Hikvision Intercom Broadcasting System are affected by CVE-2023-6895?

Versions from 3.0.3 up to but not including 4.1.0 are affected by CVE-2023-6895.

Q: Is there a proof of concept for CVE-2023-6895?

Yes, there is a proof of concept that demonstrates the exploitation of CVE-2023-6895.

Published Dec 17, 2023

Updated

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.320201113RELEASE(HIK). It has been declared as critical. This vulnerability affects unknown code of the file /php/ping.php. The manipulation of the argument jsondata[ip] with the input netstat -ano leads to os command injection. The exploit has been disclosed to the public and may be used. Upgrading to version 4.1.0 is able to address this issue. It is recommended to upgrade the affected component. VDB-248254 is the identifier assigned to this vulnerability.

Affected Software

30 affected components

All of the following

Hikvision Intercom Broadcast System>=3.0.3<4.1.0

Any of the following

Hikvision Ds-kd-bk

Hikvision Ds-kd-dis

Hikvision Ds-kd-e

Hikvision Ds-kd-in

Hikvision Ds-kd-info

Hikvision Ds-kd-kk

Hikvision Ds-kd-kk\/s

Hikvision Ds-kd-kp

Hikvision Ds-kd-kp\/s

Hikvision Ds-kd-m

Hikvision Ds-kd3003-e6

Hikvision Ds-kd8003ime1\(b\)

Hikvision Ds-kd8003ime1\(b\)\/flush

Hikvision Ds-kd8003ime1\(b\)\/ns

Hikvision Ds-kd8003ime1\(b\)\/s

Hikvision Ds-kd8003ime1\(b\)\/surface

Hikvision Ds-kh6220-le1

Hikvision Ds-kh6320-le1

Hikvision Ds-kh6320-tde1

Hikvision Ds-kh6320-te1

Hikvision Ds-kh6320-wtde1

Hikvision Ds-kh6320-wte1

Hikvision Ds-kh6350-wte1

Hikvision Ds-kh6351-te1

Hikvision Ds-kh6351-wte1

Hikvision Ds-kh63le1\(b\)

Hikvision Ds-kh8520-wte1

Hikvision Ds-kh9310-wte1\(b\)

Hikvision Ds-kh9510-wte1\(b\)

Event History

Dec 17, 2023

CVE Published

08:00 AM

Data Sourced

08:00 AM

DescriptionSeverityWeakness

Dec 12, 56017

Event

via FIRST·10:09 PM

Frequently Asked Questions

What is the severity of CVE-2023-6895?

CVE-2023-6895 has been declared as critical.

What impact does CVE-2023-6895 have on the Hikvision Intercom Broadcasting System?

CVE-2023-6895 allows for OS command injection through the manipulation of the jsondata[ip] argument.

How do I fix CVE-2023-6895?

To fix CVE-2023-6895, update the Hikvision Intercom Broadcasting System to version 4.1.0 or higher.

Which versions of Hikvision Intercom Broadcasting System are affected by CVE-2023-6895?

Versions from 3.0.3 up to but not including 4.1.0 are affected by CVE-2023-6895.

Is there a proof of concept for CVE-2023-6895?