What is the CVSS score of CVE-2023-28809?

CVE-2023-28809 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.6%.

Ds K1T320Efwx Firmware CVE-2023-28809

HIGH

Improper Access Control (CWE-284)

2023-06-15 hsrc@hikvision.com

Authentication Bypass Ds K1T320Efwx Firmware Ds K1T320Efx Firmware Ds K1T320Ewx Firmware Ds K1T320Ex Firmware Ds K1T320Mfwx Firmware Ds K1T320Mfx Firmware Ds K1T320Mwx Firmware Ds K1T320Mx Firmware Ds K1T341Am Firmware Ds K1T341Amf Firmware Ds K1T341Cm Firmware Ds K1T343Ewx Firmware Ds K1T343Ex Firmware Ds K1T343Mwx Firmware Ds K1T343Mx Firmware Ds K1t671 Firmware Ds K1T671M Firmware Ds K1T671Mf Firmware Ds K1T671T Firmware Ds K1T671Tm Firmware Ds K1T671Tm 3Xf Firmware Ds K1T671Tmf Firmware Ds K1T671Tmfw Firmware Ds K1T671Tmw Firmware Ds K1T804Af Firmware Ds K1T804Amf Firmware

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Jun 15, 2023 - 19:15 nvd

HIGH 7.5

DescriptionNVD

Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in. To exploit the vulnerability, attackers have to request the session ID at the same time as a valid user logs in, and gain device operation permissions by forging the IP and session ID of an authenticated user.

AnalysisAI

Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-284. Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in. To exploit the vulnerability, attackers have to request the session ID at the same time as a valid user logs in, and gain device operation permissions by forging the IP and session ID of an authenticated user. Affected products include: Hikvision Ds-K1T320Efwx Firmware, Hikvision Ds-K1T320Efx Firmware, Hikvision Ds-K1T320Ewx Firmware, Hikvision Ds-K1T320Ex Firmware, Hikvision Ds-K1T320Mfwx Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.