CVE-2023-28811
7.4
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Summary
There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Hikvision | iDS-EXXHUH | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | DS-EXXHGH | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | iDS-EXXHQH | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | DVR-EXXHUH | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | DVR-EXXHGH | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | DVR-EXXHQH | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | iDS-72XXHQH-M(C) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | iDS-72XXHUH-M(C) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | iDS-72XXHQH-M(E) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | iDS-72XXHUH-M(E) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | iDS-72XXHTH-M(C) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | HW-HWD-72XXMH-G4 | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | HW-HWD-62XXMH-G4 | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | HL-DVR-216Q-K2(E) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | DS-71XXHGH-M(C) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | DS-72XXHGH-M(C) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | DS-71XXHGH-K(S) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | DS-72XXHGH-K(S) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | HL-DVR-1XXG-K(S) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | HL-DVR-2XXG-K(S) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | HL-DVR-1XXG-M(C) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | HL-DVR-2XXG-M(C) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | HW-HWD-51XXH(S) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | HW-HWD-51XXH-G | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | HW-HWD-51XXMH-G | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | iDS-71xxHQH-M(C) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | iDS-71xxHQH-M(E) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | iDS-72xxHQH-M/E(C) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | iDS-72xxHQH-M/E(E) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | HL-DVR-2XXQ-M(C) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | HL-DVR-2XXQ-M(E) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | HW-HWD-61XXMH-G4 | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | HW-HWD-61XXMH-G4(E) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | iDS-71xxHUH-M(C) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | iDS-72xxHUH-M/E(C) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | iDS-71xxHUH-M(E) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | iDS-72xxHUH-M/E(E) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | HL-DVR-2XXU-M(C) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | HL-DVR-2XXU-M(E) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | HW-HWD-71XXMH-G4 | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | HW-HWD-71XXMH-G4(E) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | NVR-2xxMH-C(D) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | NVR-1xxMH-C(D) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | HW-HWN-42xxMH(D) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | HW-HWN-41xxMH(D) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | DS-71xxNI-Q1(C) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | DS-71xxNI-Q1(D) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | HL-NVR-1xxMH-D(C) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | HL-NVR-1xxMH-D(D) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | HW-HWN-21xxMH(C) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | HW-HWN-21xxMH(D) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | DS-76xxNI-Q1(C) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | DS-76xxNI-Q2(C) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | DS-76xxNI-K1(C) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | HW-HWN-41xxMH(C) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | HW-HWN-42xxMH(C) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | HL-NVR-1xxMH-C(C) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | HL-NVR-2xxMH-C(C) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
| Hikvision | DS-77xxNI-I4(B) | Build date before 230821(Version before V4.1.60 are not affected) | affected |
Weaknesses
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.