What’s Vulnerable › Vulnerabilities

CVE-2023-28811

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-11-23 · updated 2026-06-17
• Weakness: CWE-120

Description

There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.

Affected products

• Hikvision Ds-7104Ni-Q1(C) Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Ds-7104Ni-Q1(D) Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Ds-7108Ni-Q1(C) Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Ds-7108Ni-Q1(D) Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Ds-7604Ni-K1(C) Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Ds-7604Ni-K1/4P/4G(C) Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Ds-7604Ni-Q1(C) Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Ds-7604Ni-Q1/4P(C) Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Ds-7608Ni-K1/8P(C) Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Ds-7608Ni-K1/8P/4G(C) Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Ds-7608Ni-Q1(C) Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Ds-7608Ni-Q1/8P(C) Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Ds-7608Ni-Q2(C) Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Ds-7608Ni-Q2/8P(C) Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Ds-7616Ni-K1(C) Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Ds-7616Ni-Q1(C) Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Ds-7616Ni-Q2(C) Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Ds-7616Ni-Q2/16P(C) Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Dvr Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Nvr-104Mh-C(C) Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Nvr-104Mh-C(D) Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Nvr-104Mh-C/4P(D) Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Nvr-104Mh-D(C) Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Nvr-104Mh-D(D) Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Nvr-104Mh-D/4P(C) Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Nvr-108H-D(C) Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Nvr-108H-D/8P(C) Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Nvr-108H-D/8P(D) Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Nvr-108Mh-C(C) Firmware: before 4.1.60 — fixed in 4.1.60
• Hikvision Nvr-108Mh-C(D) Firmware: before 4.1.60 — fixed in 4.1.60

How to fix

Upgrade to a fixed version: Hikvision Ds-7104Ni-Q1(C) Firmware 4.1.60; Hikvision Ds-7104Ni-Q1(D) Firmware 4.1.60; Hikvision Ds-7108Ni-Q1(C) Firmware 4.1.60; Hikvision Ds-7108Ni-Q1(D) Firmware 4.1.60; Hikvision Ds-7604Ni-K1(C) Firmware 4.1.60; Hikvision Ds-7604Ni-K1/4P/4G(C) Firmware 4.1.60; Hikvision Ds-7604Ni-Q1(C) Firmware 4.1.60; Hikvision Ds-7604Ni-Q1/4P(C) Firmware 4.1.60; Hikvision Ds-7608Ni-K1/8P(C) Firmware 4.1.60; Hikvision Ds-7608Ni-K1/8P/4G(C) Firmware 4.1.60; Hikvision Ds-7608Ni-Q1(C) Firmware 4.1.60; Hikvision Ds-7608Ni-Q1/8P(C) Firmware 4.1.60. Check the vendor advisory for mitigations.

References

• https://www.hikvision.com/en/support/cybersecurity/security-advisory/buffer-overflow-vulnerability-in-hikvision-nvr-dvr-devices/
• https://www.hikvision.com/en/support/cybersecurity/security-advisory/buffer-overflow-vulnerability-in-hikvision-nvr-dvr-devices/

Get alerted when CVE-2023-28811 or the next vulnerability affects your stack