Skip to content
Connect AISign inSign up free
CVE-2023-288104.3MediumCWE-284

CVE-2023-28810: hikvision DS-K1T804AXX vulnerability

hikvision · DS-K1T804AXX

Vendor fix available · Affected: hikvision DS-K1T804AXX · Exploitation: likely to be exploited (10% or more)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

10.4%probability of exploitation in the next 30 days
95th percentile
050100

Higher than 95% of scored CVEs

4.3MediumCVSS 3.1
LowMedium

DescriptionCVE.org

Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.

Affected products8

From the CVE record. A product or version that is not listed is unknown, not unaffected.

  • hikvision · DS-K1T804AXXfrom V1.4.0_build221212 before V1.4.0_build221212
  • hikvision · DS-K1T341AXXfrom V3.2.30_build221223 before V3.2.30_build221223
  • hikvision · DS-K1T671XXXfrom V3.2.30_build221223 before V3.2.30_build221223
  • hikvision · DS-K1T343XXXfrom V3.14.0_build230117 before V3.14.0_build230117
  • hikvision · DS-K1T341Cfrom V3.3.8_build230112 before V3.3.8_build230112
  • hikvision · DS-K1T320XXXfrom V3.5.0_build220706 before V3.5.0_build220706
  • hikvision · DS-KH63 Series,DS-KH85 Seriesfrom V2.2.8_build230219 before V2.2.8_build230219
  • hikvision · DS-KH9310-WTE1(B),DS-KH9510-WTE1(B)from V2.1.76_build230204 before V2.1.76_build230204

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Likely to be exploited (10% or more). EPSS gives it a 10% or higher chance of exploitation in the next 30 days.
CISA KEV
Not listed
Public check
No public nuclei template
Vendor
hikvision
Published
June 2023

CoverageNo articles yet

No CyberSIXT article names CVE-2023-28810 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References