CVSS 3.1
6.5 mediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2023-28811
There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
- CWE
- CWE-120
- Published
- Modified
- Record from
- the NVD, synced
Affected
- hikvision:ds-7104ni-q1\(c\)_firmware
- hikvision:ds-7104ni-q1\(d\)_firmware
- hikvision:ds-7108ni-q1\(c\)_firmware
- hikvision:ds-7108ni-q1\(d\)_firmware
- hikvision:ds-7604ni-k1\(c\)_firmware
- hikvision:ds-7604ni-k1\/4p\/4g\(c\)_firmware
- hikvision:ds-7604ni-q1\(c\)_firmware
- hikvision:ds-7604ni-q1\/4p\(c\)_firmware
- hikvision:ds-7608ni-k1\/8p\(c\)_firmware
- hikvision:ds-7608ni-k1\/8p\/4g\(c\)_firmware
- hikvision:ds-7608ni-q1\(c\)_firmware
- hikvision:ds-7608ni-q1\/8p\(c\)_firmware
- hikvision:ds-7608ni-q2\(c\)_firmware
- hikvision:ds-7608ni-q2\/8p\(c\)_firmware
- hikvision:ds-7616ni-k1\(c\)_firmware
- hikvision:ds-7616ni-q1\(c\)_firmware
- hikvision:ds-7616ni-q2\(c\)_firmware
- hikvision:ds-7616ni-q2\/16p\(c\)_firmware
- hikvision:dvr_firmware
- hikvision:nvr-104mh-c\(c\)_firmware
- hikvision:nvr-104mh-c\(d\)_firmware
- hikvision:nvr-104mh-c\/4p\(d\)_firmware
- hikvision:nvr-104mh-d\(c\)_firmware
- hikvision:nvr-104mh-d\(d\)_firmware
- hikvision:nvr-104mh-d\/4p\(c\)_firmware
- hikvision:nvr-108h-d\(c\)_firmware
- hikvision:nvr-108h-d\/8p\(c\)_firmware
- hikvision:nvr-108h-d\/8p\(d\)_firmware
- hikvision:nvr-108mh-c\(c\)_firmware
- hikvision:nvr-108mh-c\(d\)_firmware
- hikvision:nvr-108mh-c\/8p\(c\)_firmware
- hikvision:nvr-108mh-d\(c\)_firmware
- hikvision:nvr-108mh-d\(d\)_firmware
- hikvision:nvr-108mh-d\/8p\(c\)_firmware
- hikvision:nvr-116mh-c\(c\)_firmware
- hikvision:nvr-116mh-c\(d\)_firmware
- hikvision:nvr-208mh-c\(c\)_firmware
- hikvision:nvr-208mh-c\/8p\(d\)_firmware
- hikvision:nvr-216mh-c\(d\)_firmware
- hikvision:nvr-216mh-c\/16p\(d\)_firmware