CVE-2023-28811

Published: Nov 23, 2023

Modified: Aug 2, 2024

PUBLISHED

CVSS v3.1

7.4

HIGH

Description

There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.

Vendor	Product	Versions
Hikvision	iDS-EXXHUH	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	DS-EXXHGH	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	iDS-EXXHQH	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	DVR-EXXHUH	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	DVR-EXXHGH	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	DVR-EXXHQH	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	iDS-72XXHQH-M(C)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	iDS-72XXHUH-M(C)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	iDS-72XXHQH-M(E)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	iDS-72XXHUH-M(E)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	iDS-72XXHTH-M(C)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	HW-HWD-72XXMH-G4	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	HW-HWD-62XXMH-G4	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	HL-DVR-216Q-K2(E)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	DS-71XXHGH-M(C)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	DS-72XXHGH-M(C)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	DS-71XXHGH-K(S)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	DS-72XXHGH-K(S)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	HL-DVR-1XXG-K(S)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	HL-DVR-2XXG-K(S)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	HL-DVR-1XXG-M(C)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	HL-DVR-2XXG-M(C)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	HW-HWD-51XXH(S)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	HW-HWD-51XXH-G	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	HW-HWD-51XXMH-G	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	iDS-71xxHQH-M(C)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	iDS-71xxHQH-M(E)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	iDS-72xxHQH-M/E(C)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	iDS-72xxHQH-M/E(E)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	HL-DVR-2XXQ-M(C)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	HL-DVR-2XXQ-M(E)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	HW-HWD-61XXMH-G4	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	HW-HWD-61XXMH-G4(E)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	iDS-71xxHUH-M(C)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	iDS-72xxHUH-M/E(C)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	iDS-71xxHUH-M(E)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	iDS-72xxHUH-M/E(E)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	HL-DVR-2XXU-M(C)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	HL-DVR-2XXU-M(E)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	HW-HWD-71XXMH-G4	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	HW-HWD-71XXMH-G4(E)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	NVR-2xxMH-C(D)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	NVR-1xxMH-C(D)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	HW-HWN-42xxMH(D)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	HW-HWN-41xxMH(D)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	DS-71xxNI-Q1(C)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	DS-71xxNI-Q1(D)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	HL-NVR-1xxMH-D(C)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	HL-NVR-1xxMH-D(D)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	HW-HWN-21xxMH(C)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	HW-HWN-21xxMH(D)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	DS-76xxNI-Q1(C)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	DS-76xxNI-Q2(C)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	DS-76xxNI-K1(C)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	HW-HWN-41xxMH(C)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	HW-HWN-42xxMH(C)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	HL-NVR-1xxMH-C(C)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	HL-NVR-2xxMH-C(C)	affected `Build date before 230821(Version before V4.1.60 are not affected)`
Hikvision	DS-77xxNI-I4(B)	affected `Build date before 230821(Version before V4.1.60 are not affected)`

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

None

Availability

High

References

https://www.hikvision.com/en/support/cybersecurity/security-advisory/buffer-overflow-vulnerability-in-hikvision-nvr-dvr-devices/

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2023-28811

Description

Affected Products

CVSS v3.1 Details

References