CVE-2023-28811
Severity Score
6.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
Hay un desbordamiento del búfer en la función de recuperación de contraseña de los modelos NVR/DVR de Hikvision. Si se explota, un atacante en la misma red de área local (LAN) podría provocar un mal funcionamiento del dispositivo al enviar paquetes especialmente manipulados a un dispositivo sin parches.
*Credits:
Peter Szot @IOActive
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-03-23 CVE Reserved
- 2023-11-23 CVE Published
- 2023-12-09 EPSS Updated
- 2024-08-02 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.hikvision.com/en/support/cybersecurity/security-advisory/buffer-overflow-vulnerability-in-hikvision-nvr-dvr-devices | 2023-12-08 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Hikvision Search vendor "Hikvision" | Nvr-216mh-c\(d\) Firmware Search vendor "Hikvision" for product "Nvr-216mh-c\(d\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Nvr-216mh-c\(d\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Nvr-216mh-c\(d\) Search vendor "Hikvision" for product "Nvr-216mh-c\(d\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Nvr-216mh-c\/16p\(d\) Firmware Search vendor "Hikvision" for product "Nvr-216mh-c\/16p\(d\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Nvr-216mh-c\/16p\(d\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Nvr-216mh-c\/16p\(d\) Search vendor "Hikvision" for product "Nvr-216mh-c\/16p\(d\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Nvr-208mh-c\/8p\(d\) Firmware Search vendor "Hikvision" for product "Nvr-208mh-c\/8p\(d\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Nvr-208mh-c\/8p\(d\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Nvr-208mh-c\/8p\(d\) Search vendor "Hikvision" for product "Nvr-208mh-c\/8p\(d\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Nvr-104mh-c\/4p\(d\) Firmware Search vendor "Hikvision" for product "Nvr-104mh-c\/4p\(d\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Nvr-104mh-c\/4p\(d\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Nvr-104mh-c\/4p\(d\) Search vendor "Hikvision" for product "Nvr-104mh-c\/4p\(d\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Nvr-104mh-c\(d\) Firmware Search vendor "Hikvision" for product "Nvr-104mh-c\(d\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Nvr-104mh-c\(d\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Nvr-104mh-c\(d\) Search vendor "Hikvision" for product "Nvr-104mh-c\(d\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Nvr-108mh-c\(d\) Firmware Search vendor "Hikvision" for product "Nvr-108mh-c\(d\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Nvr-108mh-c\(d\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Nvr-108mh-c\(d\) Search vendor "Hikvision" for product "Nvr-108mh-c\(d\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Nvr-116mh-c\(d\) Firmware Search vendor "Hikvision" for product "Nvr-116mh-c\(d\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Nvr-116mh-c\(d\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Nvr-116mh-c\(d\) Search vendor "Hikvision" for product "Nvr-116mh-c\(d\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-7104ni-q1\(c\) Firmware Search vendor "Hikvision" for product "Ds-7104ni-q1\(c\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Ds-7104ni-q1\(c\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-7104ni-q1\(c\) Search vendor "Hikvision" for product "Ds-7104ni-q1\(c\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-7104ni-q1\(d\) Firmware Search vendor "Hikvision" for product "Ds-7104ni-q1\(d\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Ds-7104ni-q1\(d\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-7104ni-q1\(d\) Search vendor "Hikvision" for product "Ds-7104ni-q1\(d\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-7108ni-q1\(c\) Firmware Search vendor "Hikvision" for product "Ds-7108ni-q1\(c\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Ds-7108ni-q1\(c\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-7108ni-q1\(c\) Search vendor "Hikvision" for product "Ds-7108ni-q1\(c\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-7108ni-q1\(d\) Firmware Search vendor "Hikvision" for product "Ds-7108ni-q1\(d\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Ds-7108ni-q1\(d\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-7108ni-q1\(d\) Search vendor "Hikvision" for product "Ds-7108ni-q1\(d\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Nvr-104mh-d\(c\) Firmware Search vendor "Hikvision" for product "Nvr-104mh-d\(c\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Nvr-104mh-d\(c\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Nvr-104mh-d\(c\) Search vendor "Hikvision" for product "Nvr-104mh-d\(c\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Nvr-104mh-d\(d\) Firmware Search vendor "Hikvision" for product "Nvr-104mh-d\(d\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Nvr-104mh-d\(d\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Nvr-104mh-d\(d\) Search vendor "Hikvision" for product "Nvr-104mh-d\(d\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Nvr-108h-d\(c\) Firmware Search vendor "Hikvision" for product "Nvr-108h-d\(c\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Nvr-108h-d\(c\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Nvr-108h-d\(c\) Search vendor "Hikvision" for product "Nvr-108h-d\(c\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Nvr-108mh-d\(c\) Firmware Search vendor "Hikvision" for product "Nvr-108mh-d\(c\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Nvr-108mh-d\(c\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Nvr-108mh-d\(c\) Search vendor "Hikvision" for product "Nvr-108mh-d\(c\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Nvr-108mh-d\(d\) Firmware Search vendor "Hikvision" for product "Nvr-108mh-d\(d\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Nvr-108mh-d\(d\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Nvr-108mh-d\(d\) Search vendor "Hikvision" for product "Nvr-108mh-d\(d\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Nvr-104mh-d\/4p\(c\) Firmware Search vendor "Hikvision" for product "Nvr-104mh-d\/4p\(c\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Nvr-104mh-d\/4p\(c\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Nvr-104mh-d\/4p\(c\) Search vendor "Hikvision" for product "Nvr-104mh-d\/4p\(c\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Nvr-108h-d\/8p\(c\) Firmware Search vendor "Hikvision" for product "Nvr-108h-d\/8p\(c\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Nvr-108h-d\/8p\(c\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Nvr-108h-d\/8p\(c\) Search vendor "Hikvision" for product "Nvr-108h-d\/8p\(c\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Nvr-108h-d\/8p\(d\) Firmware Search vendor "Hikvision" for product "Nvr-108h-d\/8p\(d\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Nvr-108h-d\/8p\(d\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Nvr-108h-d\/8p\(d\) Search vendor "Hikvision" for product "Nvr-108h-d\/8p\(d\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Nvr-108mh-d\/8p\(c\) Firmware Search vendor "Hikvision" for product "Nvr-108mh-d\/8p\(c\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Nvr-108mh-d\/8p\(c\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Nvr-108mh-d\/8p\(c\) Search vendor "Hikvision" for product "Nvr-108mh-d\/8p\(c\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-7604ni-q1\(c\) Firmware Search vendor "Hikvision" for product "Ds-7604ni-q1\(c\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Ds-7604ni-q1\(c\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-7604ni-q1\(c\) Search vendor "Hikvision" for product "Ds-7604ni-q1\(c\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-7604ni-q1\/4p\(c\) Firmware Search vendor "Hikvision" for product "Ds-7604ni-q1\/4p\(c\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Ds-7604ni-q1\/4p\(c\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-7604ni-q1\/4p\(c\) Search vendor "Hikvision" for product "Ds-7604ni-q1\/4p\(c\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-7608ni-q1\(c\) Firmware Search vendor "Hikvision" for product "Ds-7608ni-q1\(c\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Ds-7608ni-q1\(c\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-7608ni-q1\(c\) Search vendor "Hikvision" for product "Ds-7608ni-q1\(c\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-7608ni-q1\/8p\(c\) Firmware Search vendor "Hikvision" for product "Ds-7608ni-q1\/8p\(c\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Ds-7608ni-q1\/8p\(c\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-7608ni-q1\/8p\(c\) Search vendor "Hikvision" for product "Ds-7608ni-q1\/8p\(c\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-7608ni-q2\(c\) Firmware Search vendor "Hikvision" for product "Ds-7608ni-q2\(c\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Ds-7608ni-q2\(c\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-7608ni-q2\(c\) Search vendor "Hikvision" for product "Ds-7608ni-q2\(c\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-7608ni-q2\/8p\(c\) Firmware Search vendor "Hikvision" for product "Ds-7608ni-q2\/8p\(c\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Ds-7608ni-q2\/8p\(c\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-7608ni-q2\/8p\(c\) Search vendor "Hikvision" for product "Ds-7608ni-q2\/8p\(c\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-7616ni-q1\(c\) Firmware Search vendor "Hikvision" for product "Ds-7616ni-q1\(c\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Ds-7616ni-q1\(c\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-7616ni-q1\(c\) Search vendor "Hikvision" for product "Ds-7616ni-q1\(c\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-7616ni-q2\/16p\(c\) Firmware Search vendor "Hikvision" for product "Ds-7616ni-q2\/16p\(c\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Ds-7616ni-q2\/16p\(c\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-7616ni-q2\/16p\(c\) Search vendor "Hikvision" for product "Ds-7616ni-q2\/16p\(c\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-7616ni-q2\(c\) Firmware Search vendor "Hikvision" for product "Ds-7616ni-q2\(c\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Ds-7616ni-q2\(c\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-7616ni-q2\(c\) Search vendor "Hikvision" for product "Ds-7616ni-q2\(c\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-7604ni-k1\(c\) Firmware Search vendor "Hikvision" for product "Ds-7604ni-k1\(c\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Ds-7604ni-k1\(c\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-7604ni-k1\(c\) Search vendor "Hikvision" for product "Ds-7604ni-k1\(c\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-7604ni-k1\/4p\/4g\(c\) Firmware Search vendor "Hikvision" for product "Ds-7604ni-k1\/4p\/4g\(c\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Ds-7604ni-k1\/4p\/4g\(c\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-7604ni-k1\/4p\/4g\(c\) Search vendor "Hikvision" for product "Ds-7604ni-k1\/4p\/4g\(c\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-7608ni-k1\/8p\(c\) Firmware Search vendor "Hikvision" for product "Ds-7608ni-k1\/8p\(c\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Ds-7608ni-k1\/8p\(c\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-7608ni-k1\/8p\(c\) Search vendor "Hikvision" for product "Ds-7608ni-k1\/8p\(c\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-7608ni-k1\/8p\/4g\(c\) Firmware Search vendor "Hikvision" for product "Ds-7608ni-k1\/8p\/4g\(c\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Ds-7608ni-k1\/8p\/4g\(c\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-7608ni-k1\/8p\/4g\(c\) Search vendor "Hikvision" for product "Ds-7608ni-k1\/8p\/4g\(c\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Ds-7616ni-k1\(c\) Firmware Search vendor "Hikvision" for product "Ds-7616ni-k1\(c\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Ds-7616ni-k1\(c\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-7616ni-k1\(c\) Search vendor "Hikvision" for product "Ds-7616ni-k1\(c\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Nvr-208mh-c\(c\) Firmware Search vendor "Hikvision" for product "Nvr-208mh-c\(c\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Nvr-208mh-c\(c\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Nvr-208mh-c\(c\) Search vendor "Hikvision" for product "Nvr-208mh-c\(c\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Nvr-104mh-c\(c\) Firmware Search vendor "Hikvision" for product "Nvr-104mh-c\(c\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Nvr-104mh-c\(c\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Nvr-104mh-c\(c\) Search vendor "Hikvision" for product "Nvr-104mh-c\(c\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Nvr-108mh-c\(c\) Firmware Search vendor "Hikvision" for product "Nvr-108mh-c\(c\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Nvr-108mh-c\(c\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Nvr-108mh-c\(c\) Search vendor "Hikvision" for product "Nvr-108mh-c\(c\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Nvr-108mh-c\/8p\(c\) Firmware Search vendor "Hikvision" for product "Nvr-108mh-c\/8p\(c\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Nvr-108mh-c\/8p\(c\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Nvr-108mh-c\/8p\(c\) Search vendor "Hikvision" for product "Nvr-108mh-c\/8p\(c\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Nvr-116mh-c\(c\) Firmware Search vendor "Hikvision" for product "Nvr-116mh-c\(c\) Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Nvr-116mh-c\(c\) Firmware" and version " < 4.1.60" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Nvr-116mh-c\(c\) Search vendor "Hikvision" for product "Nvr-116mh-c\(c\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Dvr Firmware Search vendor "Hikvision" for product "Dvr Firmware" | < 4.1.60 Search vendor "Hikvision" for product "Dvr Firmware" and version " < 4.1.60" | - |
Affected
| ||||||