Improper access control in Hikvision DS-K1T804AXX
Priority LOW 36CWE-284Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- High
- Impact type
- Security bypass, Spoofing
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-284 and CWE-384.
Summary
Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in. To exploit the vulnerability, attackers have to request the session ID at the same time as a valid user logs in, and gain device operation permissions by forging the IP and session ID of an authenticated user.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00636 50th percentileScored 2026-11-07
Fix Fixed DS-K1T804AXX (hikvision): V1.4.0_build221212DS-K1T341AXX (hikvision): V3.2.30_build221223+4 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Hikvision | DS-K1T804AXX | V1.4.0_build221212 to before V1.4.0_build221212 | V1.4.0_build221212 | Patch available | CNA |
| Hikvision | DS-K1T341AXX | V3.2.30_build221223 to before V3.2.30_build221223 | V3.2.30_build221223 | Patch available | CNA |
| Hikvision | DS-K1T671XXX | V3.2.30_build221223 to before V3.2.30_build221223 | V3.2.30_build221223 | Patch available | CNA |
| Hikvision | DS-K1T343XXX | V3.14.0_build230117 to before V3.14.0_build230117 | V3.14.0_build230117 | Patch available | CNA |
| Hikvision | DS-K1T341C | V3.3.8_build230112 to before V3.3.8_build230112 | V3.3.8_build230112 | Patch available | CNA |
| Hikvision | DS-K1T320XXX | V3.5.0_build220706 to before V3.5.0_build220706 | V3.5.0_build220706 | Patch available | CNA |
- DS-K1T804AXX VendorHikvision Affected V1.4.0_build221212 to before V1.4.0_build221212 Fixed in V1.4.0_build221212 Patch available CNA
- DS-K1T341AXX VendorHikvision Affected V3.2.30_build221223 to before V3.2.30_build221223 Fixed in V3.2.30_build221223 Patch available CNA
- DS-K1T671XXX VendorHikvision Affected V3.2.30_build221223 to before V3.2.30_build221223 Fixed in V3.2.30_build221223 Patch available CNA
- DS-K1T343XXX VendorHikvision Affected V3.14.0_build230117 to before V3.14.0_build230117 Fixed in V3.14.0_build230117 Patch available CNA
- DS-K1T341C VendorHikvision Affected V3.3.8_build230112 to before V3.3.8_build230112 Fixed in V3.3.8_build230112 Patch available CNA
- DS-K1T320XXX VendorHikvision Affected V3.5.0_build220706 to before V3.5.0_build220706 Fixed in V3.5.0_build220706 Patch available CNA
CPE configurations NVD · 52
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:hikvision:ds-k1t320efwx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t320efwx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t320efx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t320efx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t320ewx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t320ewx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t320ex_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t320ex:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t320mfwx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t320mfwx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
- cpe:2.3:o:hikvision:ds-k1t320efwx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t320efwx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t320efx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t320efx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t320ewx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t320ewx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t320ex_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t320ex:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t320mfwx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t320mfwx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
Show 42 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:hikvision:ds-k1t320mfx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t320mfx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t320mwx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t320mwx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t320mx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t320mx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t341am_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t341am:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t341amf_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t341amf:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t341cm_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t341cm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t343ewx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t343ewx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t343ex_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t343ex:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t343mwx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t343mwx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t343mx_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t343mx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t671_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t671:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t671m_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t671m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t671mf_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t671mf:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t671t_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t671t:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t671tm_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t671tm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t671tm-3xf_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t671tm-3xf:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t671tmf_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t671tmf:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t671tmfw_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t671tmfw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t671tmw_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t671tmw:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t804af_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t804af:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t804amf_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t804amf:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
- cpe:2.3:o:hikvision:ds-k1t320mfx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t320mfx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t320mwx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t320mwx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t320mx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t320mx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t341am_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t341am:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t341amf_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t341amf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t341cm_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t341cm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t343ewx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t343ewx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t343ex_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t343ex:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t343mwx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t343mwx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t343mx_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t343mx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t671_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t671:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t671m_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t671m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t671mf_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t671mf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t671t_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t671t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t671tm_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t671tm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t671tm-3xf_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t671tm-3xf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t671tmf_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t671tmf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t671tmfw_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t671tmfw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t671tmw_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t671tmw:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t804af_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t804af:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t804amf_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t804amf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
Remediation
- Fix · CNA DS-K1T804AXX (hikvision) Fixed in V1.4.0_build221212
- Fix · CNA DS-K1T341AXX (hikvision) Fixed in V3.2.30_build221223
- Fix · CNA DS-K1T671XXX (hikvision) Fixed in V3.2.30_build221223
- Fix · CNA DS-K1T343XXX (hikvision) Fixed in V3.14.0_build230117
- Fix · CNA DS-K1T341C (hikvision) Fixed in V3.3.8_build230112
- Fix · CNA DS-K1T320XXX (hikvision) Fixed in V3.5.0_build220706
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
hikvision DS-K1T320XXX, DS-K1T341AXX and 4 more products V1.4.0_build221212, V3.14.0_build230117 and 3 more versions
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2023-13320 Improper access control in Hikvision DS-K1T804AXXPriority LOW 33
Timeline
- 2026-10-02 Threatist record created from CVE-2023-28809
- 2026-10-03 Alias added: GHSA-g8rj-9f8j-3x3w
- 2026-10-25 EPSS moved to the 50th–90th percentile
References
More Hikvision Ds-k1t320efwx Firmware vulnerabilities
- TI-2023-13320 Improper access control in Hikvision DS-K1T804AXX CVSS 3.1MEDIUM 4.3
Sources
- CVE-2023-28809 · CVE Program
- CVE-2023-28809 · NVD
- FIRST EPSS
- GHSA-g8rj-9f8j-3x3w · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences