Lucene search

[email protected]CVE-2023-6895

HistoryDec 17, 2023 - 8:15 a.m.

CVE-2023-6895

2023-12-1708:15:07

CWE-78

[email protected]

web.nvd.nist.gov

cve-2023-6895

vulnerability

hikvision

intercom broadcasting system

command injection

netstat

vdb-248254

5.8 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.92 High

EPSS

Percentile

99.0%

JSON

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK). It has been declared as critical. This vulnerability affects unknown code of the file /php/ping.php. The manipulation of the argument jsondata[ip] with the input netstat -ano leads to os command injection. The exploit has been disclosed to the public and may be used. Upgrading to version 4.1.0 is able to address this issue. It is recommended to upgrade the affected component. VDB-248254 is the identifier assigned to this vulnerability.

Affected configurations

NVD

Node

hikvisionintercom_broadcast_systemRange3.0.3–4.1.0

AND

hikvisionds-kd-bkMatch-

hikvisionds-kd-disMatch-

hikvisionds-kd-eMatch-

hikvisionds-kd-inMatch-

hikvisionds-kd-infoMatch-

hikvisionds-kd-kkMatch-

hikvisionds-kd-kk\/sMatch-

hikvisionds-kd-kpMatch-

hikvisionds-kd-kp\/sMatch-

hikvisionds-kd-mMatch-

hikvisionds-kd3003-e6Match-

hikvisionds-kd8003ime1\(b\)Match-

hikvisionds-kd8003ime1\(b\)\/flushMatch-

hikvisionds-kd8003ime1\(b\)\/nsMatch-

hikvisionds-kd8003ime1\(b\)\/sMatch-

hikvisionds-kd8003ime1\(b\)\/surfaceMatch-

hikvisionds-kh6220-le1Match-

hikvisionds-kh6320-le1Match-

hikvisionds-kh6320-tde1Match-

hikvisionds-kh6320-te1Match-

hikvisionds-kh6320-wtde1Match-

hikvisionds-kh6320-wte1Match-

hikvisionds-kh6350-wte1Match-

hikvisionds-kh6351-te1Match-

hikvisionds-kh6351-wte1Match-

hikvisionds-kh63le1\(b\)Match-

hikvisionds-kh8520-wte1Match-

hikvisionds-kh9310-wte1\(b\)Match-

hikvisionds-kh9510-wte1\(b\)Match-

CPENameOperatorVersion
hikvision:intercom_broadcast_systemhikvision intercom broadcast systemlt4.1.0

CPE	Name	Operator	Version
hikvision:intercom_broadcast_system	hikvision intercom broadcast system	lt	4.1.0

CNA Affected

[
  {
    "vendor": "Hikvision",
    "product": "Intercom Broadcasting System",
    "versions": [
      {
        "version": "3.0.3_20201113_RELEASE(HIK)",
        "status": "affected"
      }
    ]
  }
]

References

github.com/willchen0011/cve/blob/main/rce.md

vuldb.com/?ctiid.248254

vuldb.com/?id.248254

5.8 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.92 High

EPSS

Percentile

99.0%

JSON

Related for CVE-2023-6895

nuclei1 prion1 githubexploit1 cvelist1 nvd1