What’s Vulnerable › Vulnerabilities

CVE-2023-6096: using a inappropriate encryption logic

• Severity: high (CVSS 7.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-04-26 · updated 2026-06-17
• Weakness: CWE-668

Description

Vladimir Kononovich, a Security Researcher has found a flaw that using a inappropriate encryption logic on the DVR. firmware encryption is broken and allows to decrypt. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

Affected products

• Hanwhavision Arn-3250: all versions
• Hanwha Vision Co., Ltd. HRX-1620: all versions
• Hanwhavision Hrx-1621: all versions
• Hanwhavision Hrx-420: all versions
• Hanwhavision Hrx-421: all versions
• Hanwhavision Hrx-820: all versions
• Hanwhavision Hrx-821: all versions
• Hanwhavision Qrn-410: all versions
• Hanwhavision Qrn-430S: all versions
• Hanwhavision Qrn-810: all versions
• Hanwhavision Xrn-2010: all versions
• Hanwhavision Xrn-2010A: all versions
• Hanwhavision Xrn-2011: all versions
• Hanwhavision Xrn-2011A: all versions
• Hanwhavision Xrn-3010A: all versions
• Hanwhavision Xrn-410S: all versions
• Hanwha Vision Co., Ltd. XRN-420S: all versions
• Hanwhavision Xrn-810S: all versions

References

• https://www.hanwhavision.com/wp-content/uploads/2024/04/NVR-DVR-Vulnerability-Report-CVE-2023-6095-6096.pdf
• https://www.hanwhavision.com/wp-content/uploads/2024/04/NVR-DVR-Vulnerability-Report-CVE-2023-6095-6096.pdf

Get alerted when CVE-2023-6096 or the next vulnerability affects your stack