CVE-2023-28810

Published Jun 15, 2023

Last updated a year ago

Overview

Description
Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.
Source
hsrc@hikvision.com
NVD status
Analyzed

Risk scores

CVSS 3.1

Type
Primary
Base score
4.3
Impact score
1.4
Exploitability score
2.8
Vector string
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Severity
MEDIUM

Weaknesses

nvd@nist.gov
NVD-CWE-Other
hsrc@hikvision.com
CWE-284

Social media

Hype score
Not currently trending

Configurations