CVE-2023-28809

🗓️ 15 Jun 2023 00:00:00Reported by hikvisionType

Vulnerability in access control products allows session hijacking

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2023-28809	14 Jun 202307:00	–	attackerkb
CNNVD	Hikvision Access Control Products 授权问题漏洞	15 Jun 202300:00	–	cnnvd
Cvelist	CVE-2023-28809	15 Jun 202300:00	–	cvelist
EUVD	EUVD-2023-32444	3 Oct 202520:07	–	euvd
ICS	Hikvision Access Control and Intercom Products	12 Oct 202306:00	–	ics
NVD	CVE-2023-28809	15 Jun 202319:15	–	nvd
Prion	Session fixation	15 Jun 202319:15	–	prion
Positive Technologies	PT-2023-21982 · Hikvision · Hikvision Access Control	15 Jun 202300:00	–	ptsecurity
Vulnrichment	CVE-2023-28809	15 Jun 202300:00	–	vulnrichment

NVD

Node

hikvision ds-k1t320efwx_firmwareMatch-

AND

hikvision ds-k1t320efwxMatch-

Node

hikvision ds-k1t320efx_firmwareMatch-

AND

hikvision ds-k1t320efxMatch-

Node

hikvision ds-k1t320ewx_firmwareMatch-

AND

hikvision ds-k1t320ewxMatch-

Node

hikvision ds-k1t320ex_firmwareMatch-

AND

hikvision ds-k1t320exMatch-

Node

hikvision ds-k1t320mfwx_firmwareMatch-

AND

hikvision ds-k1t320mfwxMatch-

Node

hikvision ds-k1t320mfx_firmwareMatch-

AND

hikvision ds-k1t320mfxMatch-

Node

hikvision ds-k1t320mwx_firmwareMatch-

AND

hikvision ds-k1t320mwxMatch-

Node

hikvision ds-k1t320mx_firmwareMatch-

AND

hikvision ds-k1t320mxMatch-

Node

hikvision ds-k1t341am_firmwareMatch-

AND

hikvision ds-k1t341amMatch-

Node

hikvision ds-k1t341amf_firmwareMatch-

AND

hikvision ds-k1t341amfMatch-

Node

hikvision ds-k1t341cm_firmwareMatch-

AND

hikvision ds-k1t341cmMatch-

Node

hikvision ds-k1t343ewx_firmwareMatch-

AND

hikvision ds-k1t343ewxMatch-

Node

hikvision ds-k1t343ex_firmwareMatch-

AND

hikvision ds-k1t343exMatch-

Node

hikvision ds-k1t343mwx_firmwareMatch-

AND

hikvision ds-k1t343mwxMatch-

Node

hikvision ds-k1t343mx_firmwareMatch-

AND

hikvision ds-k1t343mxMatch-

Node

hikvision ds-k1t671_firmwareMatch-

AND

hikvision ds-k1t671Match-

Node

hikvision ds-k1t671m_firmwareMatch-

AND

hikvision ds-k1t671mMatch-

Node

hikvision ds-k1t671mf_firmwareMatch-

AND

hikvision ds-k1t671mfMatch-

Node

hikvision ds-k1t671t_firmwareMatch-

AND

hikvision ds-k1t671tMatch-

Node

hikvision ds-k1t671tm_firmwareMatch-

AND

hikvision ds-k1t671tmMatch-

Node

hikvision ds-k1t671tm-3xf_firmwareMatch-

AND

hikvision ds-k1t671tm-3xfMatch-

Node

hikvision ds-k1t671tmf_firmwareMatch-

AND

hikvision ds-k1t671tmfMatch-

Node

hikvision ds-k1t671tmfw_firmwareMatch-

AND

hikvision ds-k1t671tmfwMatch-

Node

hikvision ds-k1t671tmw_firmwareMatch-

AND

hikvision ds-k1t671tmwMatch-

Node

hikvision ds-k1t804af_firmwareMatch-

AND

hikvision ds-k1t804afMatch-

Node

hikvision ds-k1t804amf_firmwareMatch-

AND

hikvision ds-k1t804amfMatch-

[
  {
    "vendor": "hikvision",
    "product": "DS-K1T804AXX",
    "versions": [
      {
        "version": "V1.4.0_build221212",
        "status": "affected",
        "lessThan": "V1.4.0_build221212",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "hikvision",
    "product": "DS-K1T341AXX",
    "versions": [
      {
        "version": "V3.2.30_build221223",
        "status": "affected",
        "lessThan": "V3.2.30_build221223",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "hikvision",
    "product": "DS-K1T671XXX",
    "versions": [
      {
        "version": "V3.2.30_build221223",
        "status": "affected",
        "lessThan": "V3.2.30_build221223",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "hikvision",
    "product": "DS-K1T343XXX",
    "versions": [
      {
        "version": "V3.14.0_build230117",
        "status": "affected",
        "lessThan": "V3.14.0_build230117",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "hikvision",
    "product": "DS-K1T341C",
    "versions": [
      {
        "version": "V3.3.8_build230112",
        "status": "affected",
        "lessThan": "V3.3.8_build230112",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "hikvision",
    "product": "DS-K1T320XXX",
    "versions": [
      {
        "version": "V3.5.0_build220706",
        "status": "affected",
        "lessThan": "V3.5.0_build220706",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/174506/Hikvision-Access-Control-Session-Hijacking.html
hikvision	www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-access-control-intercom/

21 Nov 2024 07:56Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

EPSS0.00177

SSVC