medium4.3
CVE-2023-28810
Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities.
Impact
Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hikvision | Ds-K1t804af Firmware | through 1.4.0_build221212 |
| Hikvision | Ds-K1t804amf Firmware | through 1.4.0_build221212 |
| Hikvision | Ds-K1t341am Firmware | through 3.2.30_build221223 |
| Hikvision | Ds-K1t341amf Firmware | through 3.2.30_build221223 |
| Hikvision | Ds-K1t671m Firmware | through 3.2.30_build221223 |
| Hikvision | Ds-K1t671mf Firmware | through 3.2.30_build221223 |
| Hikvision | Ds-K1t671 Firmware | through 3.2.30_build221223 |
| Hikvision | Ds-K1t343efwx Firmware | through 3.14.0_build230117 |
| Hikvision | Ds-K1t343efx Firmware | through 3.14.0_build230117 |
| Hikvision | Ds-K1t343ewx Firmware | through 3.14.0_build230117 |
| Hikvision | Ds-K1t343ex Firmware | through 3.14.0_build230117 |
| Hikvision | Ds-K1t343mfwx Firmware | through 3.14.0_build230117 |