CVE-2023-6894
Hikvision Intercom Broadcasting System Log File system.html information disclosure
Severity Score
6.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK). It has been classified as problematic. This affects an unknown part of the file access/html/system.html of the component Log File Handler. The manipulation leads to information disclosure. The exploit has been disclosed to the public and may be used. Upgrading to version 4.1.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-248253 was assigned to this vulnerability.
Se encontró una vulnerabilidad en Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK). Ha sido clasificada como problemática. Una parte desconocida del archivo access/html/system.html del componente Log File Handler afecta a una parte desconocida. La manipulación conduce a la divulgación de información. El exploit ha sido divulgado al público y puede utilizarse. A esta vulnerabilidad se le asignó el identificador VDB-248253. NOTA: Se contactó primeramente con el proveedor sobre esta divulgación, pero no respondió de ninguna manera.
Es wurde eine Schwachstelle in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK) ausgemacht. Sie wurde als problematisch eingestuft. Dabei betrifft es einen unbekannter Codeteil der Datei access/html/system.html der Komponente Log File Handler. Mittels dem Manipulieren mit unbekannten Daten kann eine information disclosure-Schwachstelle ausgenutzt werden. Der Exploit steht zur öffentlichen Verfügung. Ein Aktualisieren auf die Version 4.1.0 vermag dieses Problem zu lösen. Als bestmögliche Massnahme wird das Einspielen eines Upgrades empfohlen.
*Credits:
willchen, willchen
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-12-16 CVE Reserved
- 2023-12-17 CVE Published
- 2024-08-02 CVE Updated
- 2024-08-02 First Exploit
- 2024-12-23 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://vuldb.com/?id.248253 | Third Party Advisory |
| URL | Date | SRC |
|---|---|---|
| https://github.com/willchen0011/cve/blob/main/unaccess.md | 2024-08-02 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kd-bk Search vendor "Hikvision" for product "Ds-kd-bk" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kd-dis Search vendor "Hikvision" for product "Ds-kd-dis" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kd-e Search vendor "Hikvision" for product "Ds-kd-e" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kd-in Search vendor "Hikvision" for product "Ds-kd-in" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kd-info Search vendor "Hikvision" for product "Ds-kd-info" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kd-kk Search vendor "Hikvision" for product "Ds-kd-kk" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kd-kk\/s Search vendor "Hikvision" for product "Ds-kd-kk\/s" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kd-kp Search vendor "Hikvision" for product "Ds-kd-kp" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kd-kp\/s Search vendor "Hikvision" for product "Ds-kd-kp\/s" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kd-m Search vendor "Hikvision" for product "Ds-kd-m" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kd3003-e6 Search vendor "Hikvision" for product "Ds-kd3003-e6" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kd8003ime1\(b\) Search vendor "Hikvision" for product "Ds-kd8003ime1\(b\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kd8003ime1\(b\)\/flush Search vendor "Hikvision" for product "Ds-kd8003ime1\(b\)\/flush" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kd8003ime1\(b\)\/ns Search vendor "Hikvision" for product "Ds-kd8003ime1\(b\)\/ns" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kd8003ime1\(b\)\/s Search vendor "Hikvision" for product "Ds-kd8003ime1\(b\)\/s" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kd8003ime1\(b\)\/surface Search vendor "Hikvision" for product "Ds-kd8003ime1\(b\)\/surface" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kh6220-le1 Search vendor "Hikvision" for product "Ds-kh6220-le1" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kh6320-le1 Search vendor "Hikvision" for product "Ds-kh6320-le1" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kh6320-tde1 Search vendor "Hikvision" for product "Ds-kh6320-tde1" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kh6320-te1 Search vendor "Hikvision" for product "Ds-kh6320-te1" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kh6320-wtde1 Search vendor "Hikvision" for product "Ds-kh6320-wtde1" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kh6320-wte1 Search vendor "Hikvision" for product "Ds-kh6320-wte1" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kh6350-wte1 Search vendor "Hikvision" for product "Ds-kh6350-wte1" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kh6351-te1 Search vendor "Hikvision" for product "Ds-kh6351-te1" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kh6351-wte1 Search vendor "Hikvision" for product "Ds-kh6351-wte1" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kh63le1\(b\) Search vendor "Hikvision" for product "Ds-kh63le1\(b\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kh8520-wte1 Search vendor "Hikvision" for product "Ds-kh8520-wte1" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kh9310-wte1\(b\) Search vendor "Hikvision" for product "Ds-kh9310-wte1\(b\)" | - | - |
Safe
|
| Hikvision Search vendor "Hikvision" | Intercom Broadcast System Search vendor "Hikvision" for product "Intercom Broadcast System" | >= 3.0.3 < 4.1.0 Search vendor "Hikvision" for product "Intercom Broadcast System" and version " >= 3.0.3 < 4.1.0" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-kh9510-wte1\(b\) Search vendor "Hikvision" for product "Ds-kh9510-wte1\(b\)" | - | - |
Safe
|