CVE-2023-28812 — Hikvision / LocalServiceComponents

Description (CNA)

There is a buffer overflow vulnerability in a web browser plug-in could allow an attacker to exploit the vulnerability by sending crafted messages to computers installed with this plug-in, which could lead to arbitrary code execution or cause process exception of the plug-in.

Affected (CNA)

Vendor / product	Versions
Hikvision / LocalServiceComponents	affected version 1.0.0.78 and the versions prior to it

CWE

No CWE identifiers supplied.

References

https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-hikvision-web-browser-plug-in-locals/

ADP enrichment

CVE

No English description supplied.

https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-hikvision-web-browser-plug-in-locals/

CISA-ADP

No English description supplied.

No references supplied.