Vulnerability · Published Jun 15, 2023 · Assigned by hikvision
CVE-2023-28809
High 7.5
In plain English
A high-severity improper access control in DS-K1T320XXX from hikvision. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 51% of all known vulnerabilities).
Official description
Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in. To exploit the vulnerability, attackers have to request the session ID at the same time as a valid user logs in, and gain device operation permissions by forging the IP and session ID of an authenticated user.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| hikvision | DS-K1T804AXX | V1.4.0_build221212 – before V1.4.0_build221212 |
| hikvision | DS-K1T341AXX | V3.2.30_build221223 – before V3.2.30_build221223 |
| hikvision | DS-K1T671XXX | V3.2.30_build221223 – before V3.2.30_build221223 |
| hikvision | DS-K1T343XXX | V3.14.0_build230117 – before V3.14.0_build230117 |
| hikvision | DS-K1T341C | V3.3.8_build230112 – before V3.3.8_build230112 |
| hikvision | DS-K1T320XXX | V3.5.0_build220706 – before V3.5.0_build220706 |
Weakness: CWE-284 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H