CVE-2023-28810 — hikvision / DS-K1T804AXX

Description (CNA)

Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.

Affected (CNA)

Vendor / product	Versions
hikvision / DS-K1T804AXX	affected V1.4.0_build221212 before V1.4.0_build221212
hikvision / DS-K1T341AXX	affected V3.2.30_build221223 before V3.2.30_build221223
hikvision / DS-K1T671XXX	affected V3.2.30_build221223 before V3.2.30_build221223
hikvision / DS-K1T343XXX	affected V3.14.0_build230117 before V3.14.0_build230117
hikvision / DS-K1T341C	affected V3.3.8_build230112 before V3.3.8_build230112
hikvision / DS-K1T320XXX	affected V3.5.0_build220706 before V3.5.0_build220706
hikvision / DS-KH63 Series,DS-KH85 Series	affected V2.2.8_build230219 before V2.2.8_build230219
hikvision / DS-KH9310-WTE1(B),DS-KH9510-WTE1(B)	affected V2.1.76_build230204 before V2.1.76_build230204

CWE

CWE-284

References

https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-access-control-intercom/

ADP enrichment

CVE

No English description supplied.

https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-access-control-intercom/

CISA-ADP

No English description supplied.

No references supplied.