CVE-2023-28809

{"id": "CVE-2023-28809", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "hsrc@hikvision.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.6}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.6}]}, "published": "2023-06-15T19:15:10.537", "references": [{"url": "http://packetstormsecurity.com/files/174506/Hikvision-Access-Control-Session-Hijacking.html", "source": "hsrc@hikvision.com"}, {"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-access-control-intercom/", "tags": ["Vendor Advisory"], "source": "hsrc@hikvision.com"}, {"url": "http://packetstormsecurity.com/files/174506/Hikvision-Access-Control-Session-Hijacking.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-access-control-intercom/", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "hsrc@hikvision.com", "description": [{"lang": "en", "value": "CWE-284"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-384"}]}], "descriptions": [{"lang": "en", "value": "Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in. To exploit the vulnerability, attackers have to request the session ID at the same time as a valid user logs in, and gain device operation permissions by forging the IP and session ID of an authenticated user."}], "lastModified": "2024-11-21T07:56:03.600", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t320efwx_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4AB2BA1B-B272-4B4E-BB2C-3EE2D267CA81"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t320efwx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7140EB24-E7B5-4F86-9A5C-0D88D1DA90C7"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t320efx_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BCAA72A5-4E87-4ADD-B9BC-1A873A861938"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t320efx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "21D67B36-A2A7-42E2-A7FB-6BBF3A973E37"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t320ewx_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "679EECBE-B875-4D58-98CE-335E9EAF8B25"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t320ewx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D4694AEF-26C6-4B03-BCCB-3683CF788085"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t320ex_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A885F112-F486-4293-A1A7-B69FEB8F1E4F"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t320ex:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B4C45E6F-34DD-4B08-A87F-D9E7D9775ED1"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t320mfwx_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C0711E27-DE19-4639-BF8E-A48FC5A5472D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t320mfwx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BC9B3F47-00F9-4C77-AFAF-25D6154E4C15"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t320mfx_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E5EB0FE7-3884-4088-A0E2-CF04A5D8C6C0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t320mfx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7C842855-FD06-412E-9B88-EDC8B419E87F"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t320mwx_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "35741C9C-4CE7-4196-988F-C623FFD98279"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t320mwx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "541C2F9D-E8D1-4928-B3DE-902B51B33A56"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t320mx_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0BF3ED7E-3041-4F50-8265-A9F75BC6FC52"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t320mx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "39668BE9-C9D5-4747-A7EA-EC3C9ADC64B0"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t341am_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "85524CE8-644F-4E8B-B61F-EBD4188F356B"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t341am:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6F12C75F-FEA4-478D-968A-9B864C49CBFE"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t341amf_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "19543853-5D0A-437A-8CDF-236D862D7F9E"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t341amf:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "85E8A304-F67E-4C0E-995B-719E9AFD2791"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t341cm_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5A853DC4-2BE1-4709-BCCA-AE0420DC8414"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t341cm:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "624D45FC-FC44-4A02-AE3F-23AD132290B4"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t343ewx_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1F8B098D-7B32-42A3-ABA0-6148AF132750"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t343ewx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D98F2425-FCB9-40DE-BCE0-3CA9BA6067BF"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t343ex_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "644FF6D6-CD32-44D1-A629-6FE0FC2F2025"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t343ex:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C4EB3496-4191-4092-961C-5F68D7A99EF6"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t343mwx_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "140AD49A-F965-493A-8EA6-7F10EDD049E6"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t343mwx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7416B8F5-2918-4418-8A5C-860C5A236BCA"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t343mx_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2D9CF5F7-31FD-4247-A05F-2425B00F551F"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t343mx:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6D4D8C07-AB2F-4E97-B3E9-C97EFAD3F017"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t671_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5CE328C4-08C2-436B-A95E-E03A0D96662F"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t671:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4B322AE4-4BE3-46EE-BFFD-730274270D52"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t671m_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3B0D6A71-EA45-4A29-A98F-3B7F46AFCED6"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t671m:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4902A1D4-7DF1-4718-BF06-DD6E7EE43E8E"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t671mf_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EB663C89-06C3-49F9-8316-A9F3883A8488"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t671mf:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BFBF47B3-0575-47C7-81E6-43E52411EA4D"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t671t_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "55E53965-E177-44B0-AB95-80323745741D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t671t:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2ABB7E6B-3B39-4D18-A900-FB9818087085"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t671tm_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A95CBFF1-3E92-4080-9B57-185EFEB3D6A2"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t671tm:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "050D18D3-868E-47DE-8ACF-55C0278F36DD"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t671tm-3xf_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D62D9A96-8A4A-488B-87CB-4A88531F483B"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t671tm-3xf:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C7844556-1139-4E47-83BF-74E245AB64DC"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t671tmf_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8680383B-7404-4C52-878B-4017C5505298"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t671tmf:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4F9D7580-7608-466A-9EC2-49891138C31C"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t671tmfw_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5E59B90D-F25D-4A59-A0EA-17ED42C99500"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t671tmfw:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4FAC44FD-D7D4-4499-BD3C-6FA15D0C058F"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t671tmw_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B3FC30B-562F-432F-B804-62362E5E2F6F"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t671tmw:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AE3C9724-1422-45A2-BFA4-D0132D090CCD"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t804af_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0A641FCD-EB20-4B0E-A536-AD29ABA9FF6D"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t804af:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BF2888DD-2FBC-453F-ADED-2134D526EB7A"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:hikvision:ds-k1t804amf_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "47C3FB28-D6FE-4455-A71C-C8BD082D092B"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:hikvision:ds-k1t804amf:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "81F0BEA6-D675-4B8D-AEE3-44A63C7107D5"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "hsrc@hikvision.com"}