Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities.
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in V1.4.0_build221212, V3.2.30_build221223, V3.14.0_build230117, V3.3.8_build230112, V3.5.0_build220706, and 2 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- 1 proof of concept on GitHub
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
- EPSS reached 10%
FIRST estimates at least a 10% chance of exploitation in the next 30 days
Affected versions
- hikvision DS-K1T804AXX
From V1.4.0_build221212 · fixed in V1.4.0_build221212
- hikvision DS-K1T341AXX
From V3.2.30_build221223 · fixed in V3.2.30_build221223
- hikvision DS-K1T671XXX
From V3.2.30_build221223 · fixed in V3.2.30_build221223
- hikvision DS-K1T343XXX
From V3.14.0_build230117 · fixed in V3.14.0_build230117
- hikvision DS-K1T341C
From V3.3.8_build230112 · fixed in V3.3.8_build230112
- hikvision DS-K1T320XXX
From V3.5.0_build220706 · fixed in V3.5.0_build220706
- hikvision DS-KH63 Series,DS-KH85 Series
From V2.2.8_build230219 · fixed in V2.2.8_build230219
- hikvision DS-KH9310-WTE1(B),DS-KH9510-WTE1(B)
From V2.1.76_build230204 · fixed in V2.1.76_build230204