CVE-2023-28811 HIGH

CVE-2023-28811

Vendor Hikvision
Product iDS-EXXHUH
Published November 23, 2023
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

7.4/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

What the vulnerability does

01Description

There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.

Key dates

02Disclosure timeline

November 23, 2023 CVE published
August 2, 2024 Record updated