What’s Vulnerable › Vulnerabilities

CVE-2023-28809

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-06-15 · updated 2026-06-17
• Weakness: CWE-284

Description

Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in. To exploit the vulnerability, attackers have to request the session ID at the same time as a valid user logs in, and gain device operation permissions by forging the IP and session ID of an authenticated user.

Affected products

• Hikvision Ds-K1T320Efwx Firmware: all versions
• Hikvision Ds-K1T320Efx Firmware: all versions
• Hikvision Ds-K1T320Ewx Firmware: all versions
• Hikvision Ds-K1T320Ex Firmware: all versions
• Hikvision Ds-K1T320Mfwx Firmware: all versions
• Hikvision Ds-K1T320Mfx Firmware: all versions
• Hikvision Ds-K1T320Mwx Firmware: all versions
• Hikvision Ds-K1T320Mx Firmware: all versions
• Hikvision Ds-K1T341Am Firmware: all versions
• Hikvision Ds-K1T341Amf Firmware: all versions
• Hikvision Ds-K1T341Cm Firmware: all versions
• Hikvision Ds-K1T343Ewx Firmware: all versions
• Hikvision Ds-K1T343Ex Firmware: all versions
• Hikvision Ds-K1T343Mwx Firmware: all versions
• Hikvision Ds-K1T343Mx Firmware: all versions
• Hikvision Ds-K1T671 Firmware: all versions
• Hikvision Ds-K1T671M Firmware: all versions
• Hikvision Ds-K1T671Mf Firmware: all versions
• Hikvision Ds-K1T671T Firmware: all versions
• Hikvision Ds-K1T671Tm-3Xf Firmware: all versions
• Hikvision Ds-K1T671Tm Firmware: all versions
• Hikvision Ds-K1T671Tmf Firmware: all versions
• Hikvision Ds-K1T671Tmfw Firmware: all versions
• Hikvision Ds-K1T671Tmw Firmware: all versions
• Hikvision Ds-K1T804Af Firmware: all versions
• Hikvision Ds-K1T804Amf Firmware: all versions

References

• http://packetstormsecurity.com/files/174506/Hikvision-Access-Control-Session-Hijacking.html
• https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-access-control-intercom/
• http://packetstormsecurity.com/files/174506/Hikvision-Access-Control-Session-Hijacking.html
• https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-access-control-intercom/

Get alerted when CVE-2023-28809 or the next vulnerability affects your stack