CVE-2023-28811

Published: Nov 23, 2023Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.

Affected (40)

Products: Hikvision: Nvr 216mh C(d) Firmware, Nvr 216mh C/16p(d) Firmware, Nvr 208mh C/8p(d) Firmware, Nvr 104mh C/4p(d) Firmware, Nvr 104mh C(d) Firmware, Nvr 108mh C(d) Firmware, Nvr 116mh C(d) Firmware, Ds 7104ni Q1(c) Firmware, Ds 7104ni Q1(d) Firmware, Ds 7108ni Q1(c) Firmware, Ds 7108ni Q1(d) Firmware, Nvr 104mh D(c) Firmware, Nvr 104mh D(d) Firmware, Nvr 108h D(c) Firmware, Nvr 108mh D(c) Firmware, Nvr 108mh D(d) Firmware, Nvr 104mh D/4p(c) Firmware, Nvr 108h D/8p(c) Firmware, Nvr 108h D/8p(d) Firmware, Nvr 108mh D/8p(c) Firmware, Ds 7604ni Q1(c) Firmware, Ds 7604ni Q1/4p(c) Firmware, Ds 7608ni Q1(c) Firmware, Ds 7608ni Q1/8p(c) Firmware, Ds 7608ni Q2(c) Firmware, Ds 7608ni Q2/8p(c) Firmware, Ds 7616ni Q1(c) Firmware, Ds 7616ni Q2/16p(c) Firmware, Ds 7616ni Q2(c) Firmware, Ds 7604ni K1(c) Firmware, Ds 7604ni K1/4p/4g(c) Firmware, Ds 7608ni K1/8p(c) Firmware, Ds 7608ni K1/8p/4g(c) Firmware, Ds 7616ni K1(c) Firmware, Nvr 208mh C(c) Firmware, Nvr 104mh C(c) Firmware, Nvr 108mh C(c) Firmware, Nvr 108mh C/8p(c) Firmware, Nvr 116mh C(c) Firmware, Dvr Firmware

Hikvision

40 products

Nvr 216mh C(d) Firmware

Nvr 216mh C/16p(d) Firmware

Nvr 208mh C/8p(d) Firmware

Nvr 104mh C/4p(d) Firmware

Nvr 104mh C(d) Firmware

Nvr 108mh C(d) Firmware

Nvr 116mh C(d) Firmware

Ds 7104ni Q1(c) Firmware

Ds 7104ni Q1(d) Firmware

Ds 7108ni Q1(c) Firmware

Ds 7108ni Q1(d) Firmware

Nvr 104mh D(c) Firmware

Nvr 104mh D(d) Firmware

Nvr 108h D(c) Firmware

Nvr 108mh D(c) Firmware

Nvr 108mh D(d) Firmware

Nvr 104mh D/4p(c) Firmware

Nvr 108h D/8p(c) Firmware

Nvr 108h D/8p(d) Firmware

Nvr 108mh D/8p(c) Firmware

Ds 7604ni Q1(c) Firmware

Ds 7604ni Q1/4p(c) Firmware

Ds 7608ni Q1(c) Firmware

Ds 7608ni Q1/8p(c) Firmware

Ds 7608ni Q2(c) Firmware

Ds 7608ni Q2/8p(c) Firmware

Ds 7616ni Q1(c) Firmware

Ds 7616ni Q2/16p(c) Firmware

Ds 7616ni Q2(c) Firmware

Ds 7604ni K1(c) Firmware

Ds 7604ni K1/4p/4g(c) Firmware

Ds 7608ni K1/8p(c) Firmware

Ds 7608ni K1/8p/4g(c) Firmware

Ds 7616ni K1(c) Firmware

Nvr 208mh C(c) Firmware

Nvr 104mh C(c) Firmware

Nvr 108mh C(c) Firmware

Nvr 108mh C/8p(c) Firmware

Nvr 116mh C(c) Firmware

Dvr Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Nvr 216mh C(d) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Nvr 216mh C(d)	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Nvr 216mh C/16p(d) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Nvr 216mh C/16p(d)	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Nvr 208mh C/8p(d) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Nvr 208mh C/8p(d)	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Nvr 104mh C/4p(d) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Nvr 104mh C/4p(d)	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Nvr 104mh C(d) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Nvr 104mh C(d)	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Nvr 108mh C(d) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Nvr 108mh C(d)	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Nvr 116mh C(d) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Nvr 116mh C(d)	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Ds 7104ni Q1(c) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Ds 7104ni Q1(c)	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Ds 7104ni Q1(d) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Ds 7104ni Q1(d)	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Ds 7108ni Q1(c) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Ds 7108ni Q1(c)	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Ds 7108ni Q1(d) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Ds 7108ni Q1(d)	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Nvr 104mh D(c) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Nvr 104mh D(c)	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Nvr 104mh D(d) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Nvr 104mh D(d)	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Nvr 108h D(c) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Nvr 108h D(c)	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Nvr 108mh D(c) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Nvr 108mh D(c)	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Nvr 108mh D(d) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Nvr 108mh D(d)	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Nvr 104mh D/4p(c) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Nvr 104mh D/4p(c)	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Nvr 108h D/8p(c) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Nvr 108h D/8p(c)	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Nvr 108h D/8p(d) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Nvr 108h D/8p(d)	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Nvr 108mh D/8p(c) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Nvr 108mh D/8p(c)	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Ds 7604ni Q1(c) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Ds 7604ni Q1(c)	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Ds 7604ni Q1/4p(c) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Ds 7604ni Q1/4p(c)	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Ds 7608ni Q1(c) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Ds 7608ni Q1(c)	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Ds 7608ni Q1/8p(c) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Ds 7608ni Q1/8p(c)	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Ds 7608ni Q2(c) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Ds 7608ni Q2(c)	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Ds 7608ni Q2/8p(c) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Ds 7608ni Q2/8p(c)	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Ds 7616ni Q1(c) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Ds 7616ni Q1(c)	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Ds 7616ni Q2/16p(c) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Ds 7616ni Q2/16p(c)	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Ds 7616ni Q2(c) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Ds 7616ni Q2(c)	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Ds 7604ni K1(c) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Ds 7604ni K1(c)	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Ds 7604ni K1/4p/4g(c) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Ds 7604ni K1/4p/4g(c)	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Ds 7608ni K1/8p(c) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Ds 7608ni K1/8p(c)	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Ds 7608ni K1/8p/4g(c) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Ds 7608ni K1/8p/4g(c)	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Ds 7616ni K1(c) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Ds 7616ni K1(c)	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Nvr 208mh C(c) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Nvr 208mh C(c)	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Nvr 104mh C(c) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Nvr 104mh C(c)	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Nvr 108mh C(c) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Nvr 108mh C(c)	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Nvr 108mh C/8p(c) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Nvr 108mh C/8p(c)	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hikvision Nvr 116mh C(c) Firmware	Before 4.1.60

Running on/with	Platform Versions
Hikvision Nvr 116mh C(c)	All versions

Configuration N

1 vulnerable

Vulnerable Software	Affected Versions
Hikvision Dvr Firmware	Before 4.1.60

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

References (2)

https://www.hikvision.com/en/support/cybersecurity/security-advisory/buffer-overflow-vulnerability-in-hikvision-nvr-dvr-devices/

Source: hsrc@hikvision.com

PatchVendor Advisory

https://www.hikvision.com/en/support/cybersecurity/security-advisory/buffer-overflow-vulnerability-in-hikvision-nvr-dvr-devices/

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.