CVE-2023-28808 — hikvision / DS-A71024/48/72R,DS-A80624S,DS-A81016S,DS-A72024/72R,DS-A80316S,DS-A82024D

Description (CNA)

Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the admin permission. The attacker can exploit the vulnerability by sending crafted messages to the affected devices.

Affected (CNA)

Vendor / product	Versions
hikvision / DS-A71024/48/72R,DS-A80624S,DS-A81016S,DS-A72024/72R,DS-A80316S,DS-A82024D	affected V2.X through V2.3.8-8
hikvision / DS-A71024/48R-CVS,DS-A72024/48R-CVS	affected V1.X through V1.1.4

CWE

CWE-284

References

https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-hybrid-san-cluster-stor/

ADP enrichment

CVE

No English description supplied.

https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-hybrid-san-cluster-stor/

CISA-ADP

No English description supplied.

No references supplied.