Description
Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| hikvision | DS-K1T804AXX | V1.4.0_build221212 – < V1.4.0_build221212 | V1.4.0_build221212 |
| hikvision | DS-K1T341AXX | V3.2.30_build221223 – < V3.2.30_build221223 | V3.2.30_build221223 |
| hikvision | DS-K1T671XXX | V3.2.30_build221223 – < V3.2.30_build221223 | V3.2.30_build221223 |
| hikvision | DS-K1T343XXX | V3.14.0_build230117 – < V3.14.0_build230117 | V3.14.0_build230117 |
| hikvision | DS-K1T341C | V3.3.8_build230112 – < V3.3.8_build230112 | V3.3.8_build230112 |
| hikvision | DS-K1T320XXX | V3.5.0_build220706 – < V3.5.0_build220706 | V3.5.0_build220706 |
| hikvision | DS-KH63 Series,DS-KH85 Series | V2.2.8_build230219 – < V2.2.8_build230219 | V2.2.8_build230219 |
| hikvision | DS-KH9310-WTE1(B),DS-KH9510-WTE1(B) | V2.1.76_build230204 – < V2.1.76_build230204 | V2.1.76_build230204 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
-
skylightcyber/CVE-2023-28810 ★ 0 · Jun 19, 2023
Exploit code for CVE-2023-28810
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 1
- ICSA-23-285-14 Hikvision Access Control and Intercom Products CISA ICS & IT advisories · Oct 12, 2023