What’s Vulnerable › Vulnerabilities

CVE-2023-28810

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 10.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-06-15 · updated 2026-06-17
• Weakness: CWE-284

Description

Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.

Affected products

• Hikvision Ds-K1T320Efwx Firmware: through 3.5.0_build220706
• Hikvision Ds-K1T320Efx Firmware: through 3.5.0_build220706
• Hikvision Ds-K1T320Ewx Firmware: through 3.5.0_build220706
• Hikvision Ds-K1T320Ex Firmware: through 3.5.0_build220706
• Hikvision Ds-K1T320Mfwx Firmware: through 3.5.0_build220706
• Hikvision Ds-K1T320Mfx Firmware: through 3.5.0_build220706
• Hikvision Ds-K1T320Mwx Firmware: through 3.5.0_build220706
• Hikvision Ds-K1T320Mx Firmware: through 3.5.0_build220706
• Hikvision Ds-K1T341Am Firmware: through 3.2.30_build221223
• Hikvision Ds-K1T341Amf Firmware: through 3.2.30_build221223
• Hikvision Ds-K1T341C Firmware: through 3.3.8_build230112
• Hikvision Ds-K1T343Efwx Firmware: through 3.14.0_build230117
• Hikvision Ds-K1T343Efx Firmware: through 3.14.0_build230117
• Hikvision Ds-K1T343Ewx Firmware: through 3.14.0_build230117
• Hikvision Ds-K1T343Ex Firmware: through 3.14.0_build230117
• Hikvision Ds-K1T343Mfwx Firmware: through 3.14.0_build230117
• Hikvision Ds-K1T343Mfx Firmware: through 3.14.0_build230117
• Hikvision Ds-K1T343Mwx Firmware: through 3.14.0_build230117
• Hikvision Ds-K1T343Mx Firmware: through 3.14.0_build230117
• Hikvision Ds-K1T671 Firmware: through 3.2.30_build221223
• Hikvision Ds-K1T671M Firmware: through 3.2.30_build221223
• Hikvision Ds-K1T671Mf Firmware: through 3.2.30_build221223
• Hikvision Ds-K1T804Af Firmware: through 1.4.0_build221212
• Hikvision Ds-K1T804Amf Firmware: through 1.4.0_build221212
• Hikvision Ds-Kh6220-Le1 Firmware: through 1.4.62_build220414
• Hikvision Ds-Kh6320-Le1 Firmware: through 2.2.8_build230219
• Hikvision Ds-Kh6320-Tde1 Firmware: through 2.2.8_build230219
• Hikvision Ds-Kh6320-Te1 Firmware: through 2.2.8_build230219
• Hikvision Ds-Kh6320-Wtde1 Firmware: through 2.2.8_build230219
• Hikvision Ds-Kh6320-Wte1 Firmware: through 2.2.8_build230219

References

• https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-access-control-intercom/
• https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-access-control-intercom/

Get alerted when CVE-2023-28810 or the next vulnerability affects your stack