CVE-2023-28808
Severity Score
9.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the admin permission. The attacker can exploit the vulnerability by sending crafted messages to the affected devices.
*Credits:
Souvik Kandar, Arko Dhar
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-03-23 CVE Reserved
- 2023-04-11 CVE Published
- 2024-08-02 CVE Updated
- 2024-09-21 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-284: Improper Access Control
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Hikvision Search vendor "Hikvision" | Ds-a71024 Firmware Search vendor "Hikvision" for product "Ds-a71024 Firmware" | <= 2.3.8-8 Search vendor "Hikvision" for product "Ds-a71024 Firmware" and version " <= 2.3.8-8" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-a71024 Search vendor "Hikvision" for product "Ds-a71024" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-a71048 Firmware Search vendor "Hikvision" for product "Ds-a71048 Firmware" | <= 2.3.8-8 Search vendor "Hikvision" for product "Ds-a71048 Firmware" and version " <= 2.3.8-8" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-a71048 Search vendor "Hikvision" for product "Ds-a71048" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-a71072r Firmware Search vendor "Hikvision" for product "Ds-a71072r Firmware" | <= 2.3.8-8 Search vendor "Hikvision" for product "Ds-a71072r Firmware" and version " <= 2.3.8-8" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-a71072r Search vendor "Hikvision" for product "Ds-a71072r" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-a80624s Firmware Search vendor "Hikvision" for product "Ds-a80624s Firmware" | <= 2.3.8-8 Search vendor "Hikvision" for product "Ds-a80624s Firmware" and version " <= 2.3.8-8" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-a80624s Search vendor "Hikvision" for product "Ds-a80624s" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-a81016s Firmware Search vendor "Hikvision" for product "Ds-a81016s Firmware" | <= 2.3.8-8 Search vendor "Hikvision" for product "Ds-a81016s Firmware" and version " <= 2.3.8-8" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-a81016s Search vendor "Hikvision" for product "Ds-a81016s" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-a72024 Firmware Search vendor "Hikvision" for product "Ds-a72024 Firmware" | <= 2.3.8-8 Search vendor "Hikvision" for product "Ds-a72024 Firmware" and version " <= 2.3.8-8" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-a72024 Search vendor "Hikvision" for product "Ds-a72024" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-a72072r Firmware Search vendor "Hikvision" for product "Ds-a72072r Firmware" | - | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-a72072r Search vendor "Hikvision" for product "Ds-a72072r" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-a80316s Firmware Search vendor "Hikvision" for product "Ds-a80316s Firmware" | <= 2.3.8-8 Search vendor "Hikvision" for product "Ds-a80316s Firmware" and version " <= 2.3.8-8" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-a80316s Search vendor "Hikvision" for product "Ds-a80316s" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-a82024d Firmware Search vendor "Hikvision" for product "Ds-a82024d Firmware" | <= 2.3.8-8 Search vendor "Hikvision" for product "Ds-a82024d Firmware" and version " <= 2.3.8-8" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-a82024d Search vendor "Hikvision" for product "Ds-a82024d" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-a71024 Firmware Search vendor "Hikvision" for product "Ds-a71024 Firmware" | <= 1.1.4 Search vendor "Hikvision" for product "Ds-a71024 Firmware" and version " <= 1.1.4" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-a71024 Search vendor "Hikvision" for product "Ds-a71024" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-a71048r-cvs Firmware Search vendor "Hikvision" for product "Ds-a71048r-cvs Firmware" | <= 1.1.4 Search vendor "Hikvision" for product "Ds-a71048r-cvs Firmware" and version " <= 1.1.4" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-a71048r-cvs Search vendor "Hikvision" for product "Ds-a71048r-cvs" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-a72072r Firmware Search vendor "Hikvision" for product "Ds-a72072r Firmware" | <= 2.3.8-8 Search vendor "Hikvision" for product "Ds-a72072r Firmware" and version " <= 2.3.8-8" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-a72072r Search vendor "Hikvision" for product "Ds-a72072r" | - | - |
Safe
|