CVE-2023-28810
Some access control/intercom products have unauthorized modification of device network...
Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.
- Record
CVE-2023-28810- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-284
- Updated
- 2026-11-02
EUVDEUVD-2023-32445
Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.
- Record
EUVD-2023-32445- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-75h5-6rfc-gv4f
Some access control/intercom products have unauthorized modification of device network...
Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.
- Record
GHSA-75h5-6rfc-gv4f- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-284
- Updated
- 2026-11-02
NVD
Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.
- Record
CVE-2023-28810- CVSS 3.1
- 4.3 Medium
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-284
- Updated
- 2026-11-02
Affected products
- hikvision ds-k1t320efwx firmware
- hikvision ds-k1t320efx firmware
- hikvision ds-k1t320ewx firmware
- hikvision ds-k1t320ex firmware
- hikvision ds-k1t320mfwx firmware
- hikvision ds-k1t320mfx firmware
- hikvision ds-k1t320mwx firmware
- hikvision ds-k1t320mx firmware
- hikvision ds-k1t320xxx
- hikvision ds-k1t341am firmware
- hikvision ds-k1t341amf firmware
- hikvision ds-k1t341axx
Show 33 moreShow less
- hikvision ds-k1t341c
- hikvision ds-k1t341c firmware
- hikvision ds-k1t343efwx firmware
- hikvision ds-k1t343efx firmware
- hikvision ds-k1t343ewx firmware
- hikvision ds-k1t343ex firmware
- hikvision ds-k1t343mfwx firmware
- hikvision ds-k1t343mfx firmware
- hikvision ds-k1t343mwx firmware
- hikvision ds-k1t343mx firmware
- hikvision ds-k1t343xxx
- hikvision ds-k1t671 firmware
- hikvision ds-k1t671m firmware
- hikvision ds-k1t671mf firmware
- hikvision ds-k1t671xxx
- hikvision ds-k1t804af firmware
- hikvision ds-k1t804amf firmware
- hikvision ds-k1t804axx
- hikvision ds-kh6220-le1 firmware
- hikvision ds-kh63 series,ds-kh85 series
- hikvision ds-kh6320-le1 firmware
- hikvision ds-kh6320-tde1 firmware
- hikvision ds-kh6320-te1 firmware
- hikvision ds-kh6320-wtde1 firmware
- hikvision ds-kh6320-wte1 firmware
- hikvision ds-kh6350-wte1 firmware
- hikvision ds-kh6351-te1 firmware
- hikvision ds-kh6351-wte1 firmware
- hikvision ds-kh63le1\(b\) firmware
- hikvision ds-kh8520-wte1 firmware
- hikvision ds-kh9310-wte1(b),ds-kh9510-wte1(b)
- hikvision ds-kh9310-wte1\(b\) firmware
- hikvision ds-kh9510-wte1\(b\) firmware
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | skylightcyber/CVE-2023-28810 | 2023-06-19 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-28810 is a medium vulnerability (CVSS 4.3) in Hikvision Ds-k1t320efwx Firmware, published June 15, 2023. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 10.4%, the 95th percentile. No source names a fixed version.