Improper access control in Hikvision DS-K1T804AXX
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- None · Low · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-284.
Summary
Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Hikvision | DS-K1T804AXX | V1.4.0_build221212 to before V1.4.0_build221212 | V1.4.0_build221212 | Patch available | CNA |
| Hikvision | DS-K1T341AXX | V3.2.30_build221223 to before V3.2.30_build221223 | V3.2.30_build221223 | Patch available | CNA |
| Hikvision | DS-K1T671XXX | V3.2.30_build221223 to before V3.2.30_build221223 | V3.2.30_build221223 | Patch available | CNA |
| Hikvision | DS-K1T343XXX | V3.14.0_build230117 to before V3.14.0_build230117 | V3.14.0_build230117 | Patch available | CNA |
| Hikvision | DS-K1T341C | V3.3.8_build230112 to before V3.3.8_build230112 | V3.3.8_build230112 | Patch available | CNA |
| Hikvision | DS-K1T320XXX | V3.5.0_build220706 to before V3.5.0_build220706 | V3.5.0_build220706 | Patch available | CNA |
| Hikvision | DS-KH63 Series,DS-KH85 Series | V2.2.8_build230219 to before V2.2.8_build230219 | V2.2.8_build230219 | Patch available | CNA |
| Hikvision | DS-KH9310-WTE1(B),DS-KH9510-WTE1(B) | V2.1.76_build230204 to before V2.1.76_build230204 | V2.1.76_build230204 | Patch available | CNA |
- DS-K1T804AXX VendorHikvision Affected V1.4.0_build221212 to before V1.4.0_build221212 Fixed in V1.4.0_build221212 Patch available CNA
- DS-K1T341AXX VendorHikvision Affected V3.2.30_build221223 to before V3.2.30_build221223 Fixed in V3.2.30_build221223 Patch available CNA
- DS-K1T671XXX VendorHikvision Affected V3.2.30_build221223 to before V3.2.30_build221223 Fixed in V3.2.30_build221223 Patch available CNA
- DS-K1T343XXX VendorHikvision Affected V3.14.0_build230117 to before V3.14.0_build230117 Fixed in V3.14.0_build230117 Patch available CNA
- DS-K1T341C VendorHikvision Affected V3.3.8_build230112 to before V3.3.8_build230112 Fixed in V3.3.8_build230112 Patch available CNA
- DS-K1T320XXX VendorHikvision Affected V3.5.0_build220706 to before V3.5.0_build220706 Fixed in V3.5.0_build220706 Patch available CNA
- DS-KH63 Series,DS-KH85 Series VendorHikvision Affected V2.2.8_build230219 to before V2.2.8_build230219 Fixed in V2.2.8_build230219 Patch available CNA
- DS-KH9310-WTE1(B),DS-KH9510-WTE1(B) VendorHikvision Affected V2.1.76_build230204 to before V2.1.76_build230204 Fixed in V2.1.76_build230204 Patch available CNA
CPE configurations NVD · 74
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:hikvision:ds-k1t804af_firmware:*:*:*:*:*:*:*:* | up to 1.4.0_build221212 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t804af:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t804amf_firmware:*:*:*:*:*:*:*:* | up to 1.4.0_build221212 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t804amf:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t341am_firmware:*:*:*:*:*:*:*:* | up to 3.2.30_build221223 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t341am:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t341amf_firmware:*:*:*:*:*:*:*:* | up to 3.2.30_build221223 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t341amf:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t671m_firmware:*:*:*:*:*:*:*:* | up to 3.2.30_build221223 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t671m:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
- cpe:2.3:o:hikvision:ds-k1t804af_firmware:*:*:*:*:*:*:*:* Versions up to 1.4.0_build221212 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t804af:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t804amf_firmware:*:*:*:*:*:*:*:* Versions up to 1.4.0_build221212 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t804amf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t341am_firmware:*:*:*:*:*:*:*:* Versions up to 3.2.30_build221223 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t341am:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t341amf_firmware:*:*:*:*:*:*:*:* Versions up to 3.2.30_build221223 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t341amf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t671m_firmware:*:*:*:*:*:*:*:* Versions up to 3.2.30_build221223 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t671m:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
Show 64 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:hikvision:ds-k1t671mf_firmware:*:*:*:*:*:*:*:* | up to 3.2.30_build221223 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t671mf:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t671_firmware:*:*:*:*:*:*:*:* | up to 3.2.30_build221223 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t671:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t343efwx_firmware:*:*:*:*:*:*:*:* | up to 3.14.0_build230117 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t343efwx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t343efx_firmware:*:*:*:*:*:*:*:* | up to 3.14.0_build230117 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t343efx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t343ewx_firmware:*:*:*:*:*:*:*:* | up to 3.14.0_build230117 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t343ewx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t343ex_firmware:*:*:*:*:*:*:*:* | up to 3.14.0_build230117 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t343ex:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t343mfwx_firmware:*:*:*:*:*:*:*:* | up to 3.14.0_build230117 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t343mfwx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t343mfx_firmware:*:*:*:*:*:*:*:* | up to 3.14.0_build230117 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t343mfx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t343mwx_firmware:*:*:*:*:*:*:*:* | up to 3.14.0_build230117 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t343mwx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t343mx_firmware:*:*:*:*:*:*:*:* | up to 3.14.0_build230117 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t343mx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t341c_firmware:*:*:*:*:*:*:*:* | up to 3.3.8_build230112 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t341c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t320efwx_firmware:*:*:*:*:*:*:*:* | up to 3.5.0_build220706 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t320efwx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t320efx_firmware:*:*:*:*:*:*:*:* | up to 3.5.0_build220706 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t320efx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t320ewx_firmware:*:*:*:*:*:*:*:* | up to 3.5.0_build220706 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t320ewx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t320ex_firmware:*:*:*:*:*:*:*:* | up to 3.5.0_build220706 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t320ex:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t320mfwx_firmware:*:*:*:*:*:*:*:* | up to 3.5.0_build220706 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t320mfwx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t320mfx_firmware:*:*:*:*:*:*:*:* | up to 3.5.0_build220706 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t320mfx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t320mwx_firmware:*:*:*:*:*:*:*:* | up to 3.5.0_build220706 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t320mwx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-k1t320mx_firmware:*:*:*:*:*:*:*:* | up to 3.5.0_build220706 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-k1t320mx:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-kh6320-wte1_firmware:*:*:*:*:*:*:*:* | up to 2.2.8_build230219 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-kh6320-wte1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-kh6350-wte1_firmware:*:*:*:*:*:*:*:* | up to 2.2.8_build230219 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-kh6350-wte1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-kh6351-te1_firmware:*:*:*:*:*:*:*:* | up to 2.2.8_build230219 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-kh6351-te1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-kh6351-wte1_firmware:*:*:*:*:*:*:*:* | up to 2.2.8_build230219 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-kh6351-wte1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-kh6320-le1_firmware:*:*:*:*:*:*:*:* | up to 2.2.8_build230219 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-kh6320-le1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-kh63le1\(b\)_firmware:*:*:*:*:*:*:*:* | up to 2.2.8_build230219 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-kh63le1\(b\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-kh6320-tde1_firmware:*:*:*:*:*:*:*:* | up to 2.2.8_build230219 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-kh6320-tde1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-kh6320-te1_firmware:*:*:*:*:*:*:*:* | up to 2.2.8_build230219 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-kh6320-te1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-kh6320-wtde1_firmware:*:*:*:*:*:*:*:* | up to 2.2.8_build230219 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-kh6320-wtde1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-kh8520-wte1_firmware:*:*:*:*:*:*:*:* | up to 2.2.8_build230219 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-kh8520-wte1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-kh6220-le1_firmware:*:*:*:*:*:*:*:* | up to 1.4.62_build220414 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-kh6220-le1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-kh9310-wte1\(b\)_firmware:*:*:*:*:*:*:*:* | up to 2.1.76_build230204 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-kh9310-wte1\(b\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
| cpe:2.3:o:hikvision:ds-kh9510-wte1\(b\)_firmware:*:*:*:*:*:*:*:* | up to 2.1.76_build230204 | Vulnerable | Hikvision |
| cpe:2.3:h:hikvision:ds-kh9510-wte1\(b\):-:*:*:*:*:*:*:* | not specified by NVD | Running on | Hikvision |
- cpe:2.3:o:hikvision:ds-k1t671mf_firmware:*:*:*:*:*:*:*:* Versions up to 3.2.30_build221223 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t671mf:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t671_firmware:*:*:*:*:*:*:*:* Versions up to 3.2.30_build221223 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t671:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t343efwx_firmware:*:*:*:*:*:*:*:* Versions up to 3.14.0_build230117 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t343efwx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t343efx_firmware:*:*:*:*:*:*:*:* Versions up to 3.14.0_build230117 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t343efx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t343ewx_firmware:*:*:*:*:*:*:*:* Versions up to 3.14.0_build230117 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t343ewx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t343ex_firmware:*:*:*:*:*:*:*:* Versions up to 3.14.0_build230117 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t343ex:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t343mfwx_firmware:*:*:*:*:*:*:*:* Versions up to 3.14.0_build230117 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t343mfwx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t343mfx_firmware:*:*:*:*:*:*:*:* Versions up to 3.14.0_build230117 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t343mfx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t343mwx_firmware:*:*:*:*:*:*:*:* Versions up to 3.14.0_build230117 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t343mwx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t343mx_firmware:*:*:*:*:*:*:*:* Versions up to 3.14.0_build230117 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t343mx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t341c_firmware:*:*:*:*:*:*:*:* Versions up to 3.3.8_build230112 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t341c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t320efwx_firmware:*:*:*:*:*:*:*:* Versions up to 3.5.0_build220706 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t320efwx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t320efx_firmware:*:*:*:*:*:*:*:* Versions up to 3.5.0_build220706 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t320efx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t320ewx_firmware:*:*:*:*:*:*:*:* Versions up to 3.5.0_build220706 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t320ewx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t320ex_firmware:*:*:*:*:*:*:*:* Versions up to 3.5.0_build220706 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t320ex:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t320mfwx_firmware:*:*:*:*:*:*:*:* Versions up to 3.5.0_build220706 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t320mfwx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t320mfx_firmware:*:*:*:*:*:*:*:* Versions up to 3.5.0_build220706 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t320mfx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t320mwx_firmware:*:*:*:*:*:*:*:* Versions up to 3.5.0_build220706 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t320mwx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-k1t320mx_firmware:*:*:*:*:*:*:*:* Versions up to 3.5.0_build220706 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-k1t320mx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-kh6320-wte1_firmware:*:*:*:*:*:*:*:* Versions up to 2.2.8_build230219 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-kh6320-wte1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-kh6350-wte1_firmware:*:*:*:*:*:*:*:* Versions up to 2.2.8_build230219 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-kh6350-wte1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-kh6351-te1_firmware:*:*:*:*:*:*:*:* Versions up to 2.2.8_build230219 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-kh6351-te1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-kh6351-wte1_firmware:*:*:*:*:*:*:*:* Versions up to 2.2.8_build230219 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-kh6351-wte1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-kh6320-le1_firmware:*:*:*:*:*:*:*:* Versions up to 2.2.8_build230219 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-kh6320-le1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-kh63le1\(b\)_firmware:*:*:*:*:*:*:*:* Versions up to 2.2.8_build230219 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-kh63le1\(b\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-kh6320-tde1_firmware:*:*:*:*:*:*:*:* Versions up to 2.2.8_build230219 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-kh6320-tde1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-kh6320-te1_firmware:*:*:*:*:*:*:*:* Versions up to 2.2.8_build230219 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-kh6320-te1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-kh6320-wtde1_firmware:*:*:*:*:*:*:*:* Versions up to 2.2.8_build230219 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-kh6320-wtde1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-kh8520-wte1_firmware:*:*:*:*:*:*:*:* Versions up to 2.2.8_build230219 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-kh8520-wte1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-kh6220-le1_firmware:*:*:*:*:*:*:*:* Versions up to 1.4.62_build220414 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-kh6220-le1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-kh9310-wte1\(b\)_firmware:*:*:*:*:*:*:*:* Versions up to 2.1.76_build230204 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-kh9310-wte1\(b\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
- cpe:2.3:o:hikvision:ds-kh9510-wte1\(b\)_firmware:*:*:*:*:*:*:*:* Versions up to 2.1.76_build230204 Vulnerable ·Hikvision
- cpe:2.3:h:hikvision:ds-kh9510-wte1\(b\):-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Hikvision
Remediation
- Fix · CNA DS-K1T804AXX (hikvision) Fixed in V1.4.0_build221212
- Fix · CNA DS-K1T341AXX (hikvision) Fixed in V3.2.30_build221223
- Fix · CNA DS-K1T671XXX (hikvision) Fixed in V3.2.30_build221223
- Fix · CNA DS-K1T343XXX (hikvision) Fixed in V3.14.0_build230117
- Fix · CNA DS-K1T341C (hikvision) Fixed in V3.3.8_build230112
- Fix · CNA DS-K1T320XXX (hikvision) Fixed in V3.5.0_build220706
- Fix · CNA DS-KH63 Series,DS-KH85 Series (hikvision) Fixed in V2.2.8_build230219
- Fix · CNA DS-KH9310-WTE1(B),DS-KH9510-WTE1(B) (hikvision) Fixed in V2.1.76_build230204
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
hikvision DS-K1T320XXX, DS-K1T341AXX and 4 more products V1.4.0_build221212, V3.14.0_build230117 and 3 more versions
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2023-13319 Improper access control in Hikvision DS-K1T804AXXPriority LOW 36
Timeline
- 2026-10-02 Threatist record created from CVE-2023-28810
- 2026-10-03 Alias added: GHSA-75h5-6rfc-gv4f
References
More Hikvision Ds-k1t320efwx Firmware vulnerabilities
- TI-2023-13319 Improper access control in Hikvision DS-K1T804AXX CVSS 3.1HIGH 7.5
Sources
- CVE-2023-28810 · CVE Program
- CVE-2023-28810 · NVD
- FIRST EPSS
- GHSA-75h5-6rfc-gv4f · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences