What is the CVSS score of CVE-2023-28811?

CVE-2023-28811 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.4%.

Is there a patch available for CVE-2023-28811?

Yes, a patch is available for CVE-2023-28811. Update the affected software to the latest version immediately.

Dvr Firmware CVE-2023-28811

MEDIUM

Classic Buffer Overflow (CWE-120)

2023-11-23 hsrc@hikvision.com

Buffer Overflow Hikvision Dvr Firmware Nvr 216Mh C D Firmware Nvr 216Mh C 16P D Firmware Nvr 208Mh C 8P D Firmware Nvr 104Mh C 4P D Firmware Nvr 104Mh C D Firmware Nvr 108Mh C D Firmware Nvr 116Mh C D Firmware Ds 7104Ni Q1 C Firmware Ds 7104Ni Q1 D Firmware Ds 7108Ni Q1 C Firmware Ds 7108Ni Q1 D Firmware Nvr 104Mh D C Firmware Nvr 104Mh D D Firmware Nvr 108H D C Firmware Nvr 108Mh D C Firmware Nvr 108Mh D D Firmware Nvr 104Mh D 4P C Firmware Nvr 108H D 8P C Firmware Nvr 108H D 8P D Firmware Nvr 108Mh D 8P C Firmware Ds 7604Ni Q1 C Firmware Ds 7604Ni Q1 4P C Firmware Ds 7608Ni Q1 C Firmware Ds 7608Ni Q1 8P C Firmware Ds 7608Ni Q2 C Firmware Ds 7608Ni Q2 8P C Firmware Ds 7616Ni Q1 C Firmware Ds 7616Ni Q2 16P C Firmware Ds 7616Ni Q2 C Firmware Ds 7604Ni K1 C Firmware Ds 7604Ni K1 4P 4G C Firmware Ds 7608Ni K1 8P C Firmware Ds 7608Ni K1 8P 4G C Firmware Ds 7616Ni K1 C Firmware Nvr 208Mh C C Firmware Nvr 104Mh C C Firmware Nvr 108Mh C C Firmware Nvr 108Mh C 8P C Firmware Nvr 116Mh C C Firmware

6.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.5 MEDIUM

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

CVE Published

Nov 23, 2023 - 07:15 nvd

MEDIUM 6.5

DescriptionNVD

There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.

AnalysisAI

There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. Rated medium severity (CVSS 6.5), this vulnerability is no authentication required, low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.

Technical ContextAI

This vulnerability is classified as Buffer Copy without Size Check (CWE-120), which allows attackers to overflow a buffer to corrupt adjacent memory. There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device. Affected products include: Hikvision Nvr-216Mh-C\(D\) Firmware, Hikvision Nvr-216Mh-C\/16P\(D\) Firmware, Hikvision Nvr-208Mh-C\/8P\(D\) Firmware, Hikvision Nvr-104Mh-C\/4P\(D\) Firmware, Hikvision Nvr-104Mh-C\(D\) Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Always validate buffer sizes before copy operations. Use bounded functions (strncpy, snprintf). Enable compiler protections.