high7.5
CVE-2023-28809
Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in.
Impact
Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in. To exploit the vulnerability, attackers have to request the session ID at the same time as a valid user logs in, and gain device operation permissions by forging the IP and session ID of an authenticated user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hikvision | Ds-K1t320efwx Firmware | All versions |
| Hikvision | Ds-K1t320efx Firmware | All versions |
| Hikvision | Ds-K1t320ewx Firmware | All versions |
| Hikvision | Ds-K1t320ex Firmware | All versions |
| Hikvision | Ds-K1t320mfwx Firmware | All versions |
| Hikvision | Ds-K1t320mfx Firmware | All versions |
| Hikvision | Ds-K1t320mwx Firmware | All versions |
| Hikvision | Ds-K1t320mx Firmware | All versions |
| Hikvision | Ds-K1t341am Firmware | All versions |
| Hikvision | Ds-K1t341amf Firmware | All versions |
| Hikvision | Ds-K1t341cm Firmware | All versions |
| Hikvision | Ds-K1t343ewx Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/174506/Hikvision-Access-Control-Session-Hijacking.html
- https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-access-control-intercom/
- http://packetstormsecurity.com/files/174506/Hikvision-Access-Control-Session-Hijacking.html
- https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-access-control-intercom/