CVE-2023-28808

🗓️ 11 Apr 2023 00:00:00Reported by hikvisionType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 266 Views

Access control vulnerability in Hikvision Hybrid SAN/Cluster Storage products allows admin permission obtainment

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2023-28808	12 Apr 202300:29	–	circl
CNNVD	Hikvision Hybrid SAN/Cluster Storage products 安全漏洞	11 Apr 202300:00	–	cnnvd
Cvelist	CVE-2023-28808	11 Apr 202300:00	–	cvelist
EUVD	EUVD-2023-32443	3 Oct 202520:07	–	euvd
NVD	CVE-2023-28808	11 Apr 202321:15	–	nvd
OSV	CVE-2023-28808	11 Apr 202321:15	–	osv
Prion	Design/Logic Flaw	11 Apr 202321:15	–	prion
Vulnrichment	CVE-2023-28808	11 Apr 202300:00	–	vulnrichment

NVD

Node

hikvision ds-a71024_firmwareRange≤2.3.8-8

AND

hikvision ds-a71024Match-

Node

hikvision ds-a71048_firmwareRange≤2.3.8-8

AND

hikvision ds-a71048Match-

Node

hikvision ds-a71072r_firmwareRange≤2.3.8-8

AND

hikvision ds-a71072rMatch-

Node

hikvision ds-a80624s_firmwareRange≤2.3.8-8

AND

hikvision ds-a80624sMatch-

Node

hikvision ds-a81016s_firmwareRange≤2.3.8-8

AND

hikvision ds-a81016sMatch-

Node

hikvision ds-a72024_firmwareRange≤2.3.8-8

AND

hikvision ds-a72024Match-

Node

hikvision ds-a72072r_firmwareMatch-

AND

hikvision ds-a72072rMatch-

Node

hikvision ds-a80316s_firmwareRange≤2.3.8-8

AND

hikvision ds-a80316sMatch-

Node

hikvision ds-a82024d_firmwareRange≤2.3.8-8

AND

hikvision ds-a82024dMatch-

Node

hikvision ds-a71024_firmwareRange≤1.1.4

AND

hikvision ds-a71024Match-

Node

hikvision ds-a71048r-cvs_firmwareRange≤1.1.4

AND

hikvision ds-a71048r-cvsMatch-

Node

hikvision ds-a72072r_firmwareRange≤2.3.8-8

AND

hikvision ds-a72072rMatch-

[
  {
    "vendor": "hikvision",
    "product": "DS-A71024/48/72R,DS-A80624S,DS-A81016S,DS-A72024/72R,DS-A80316S,DS-A82024D",
    "versions": [
      {
        "version": "V2.X",
        "status": "affected",
        "lessThanOrEqual": "V2.3.8-8",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "hikvision",
    "product": "DS-A71024/48R-CVS,DS-A72024/48R-CVS",
    "versions": [
      {
        "version": "V1.X",
        "status": "affected",
        "lessThanOrEqual": "V1.1.4 ",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
hikvision	www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-hybrid-san-cluster-stor/

21 Nov 2024 07:56Current

9.2High risk

Vulners AI Score9.2

CVSS 3.19.1 - 9.8

EPSS0.0024

SSVC

CWE-284