CVE-2023-28811

There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on the same local area…

High7.4EPSS 0.39%

Published: 23 Nov 2023
Updated: 2 Aug 2024
Reserved: 23 Mar 2023
Assigned by: hikvision

Description

There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.

Timeline

2023
23 Mar 2023
23 Mar 2023
ID reserved
By hikvision
23 Nov 20238 months later
23 Nov 2023· 8 months later
Published
2024
2 Aug 20248 months later
2 Aug 2024· 8 months later
Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2023-28811, by who scored it
Scored by	CVSS	Score	Vector
hikvisionCNA (assigner)	3.1	High7.4	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
NVDNVD · Modified	3.1	Medium6.5	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS (exploitation in 30 days): 0.39% · top 66% of all CVEs (8 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.4.

Weakness

CWE-120 (opens in a new tab)All about CWE-120 and its CVEs

Affected products

Hikvision · iDS-EXXHUH
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · DS-EXXHGH
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · iDS-EXXHQH
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · DVR-EXXHUH
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · DVR-EXXHGH
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · DVR-EXXHQH
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · iDS-72XXHQH-M(C)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · iDS-72XXHUH-M(C)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · iDS-72XXHQH-M(E)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · iDS-72XXHUH-M(E)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · iDS-72XXHTH-M(C)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · HW-HWD-72XXMH-G4
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · HW-HWD-62XXMH-G4
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · HL-DVR-216Q-K2(E)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · DS-71XXHGH-M(C)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · DS-72XXHGH-M(C)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · DS-71XXHGH-K(S)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · DS-72XXHGH-K(S)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · HL-DVR-1XXG-K(S)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · HL-DVR-2XXG-K(S)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · HL-DVR-1XXG-M(C)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · HL-DVR-2XXG-M(C)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · HW-HWD-51XXH(S)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · HW-HWD-51XXH-G
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · HW-HWD-51XXMH-G
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · iDS-71xxHQH-M(C)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · iDS-71xxHQH-M(E)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · iDS-72xxHQH-M/E(C)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · iDS-72xxHQH-M/E(E)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · HL-DVR-2XXQ-M(C)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · HL-DVR-2XXQ-M(E)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · HW-HWD-61XXMH-G4
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · HW-HWD-61XXMH-G4(E)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · iDS-71xxHUH-M(C)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · iDS-72xxHUH-M/E(C)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · iDS-71xxHUH-M(E)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · iDS-72xxHUH-M/E(E)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · HL-DVR-2XXU-M(C)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · HL-DVR-2XXU-M(E)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · HW-HWD-71XXMH-G4
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · HW-HWD-71XXMH-G4(E)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · NVR-2xxMH-C(D)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · NVR-1xxMH-C(D)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · HW-HWN-42xxMH(D)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · HW-HWN-41xxMH(D)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · DS-71xxNI-Q1(C)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · DS-71xxNI-Q1(D)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · HL-NVR-1xxMH-D(C)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · HL-NVR-1xxMH-D(D)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · HW-HWN-21xxMH(C)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · HW-HWN-21xxMH(D)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · DS-76xxNI-Q1(C)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · DS-76xxNI-Q2(C)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · DS-76xxNI-K1(C)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · HW-HWN-41xxMH(C)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · HW-HWN-42xxMH(C)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · HL-NVR-1xxMH-C(C)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · HL-NVR-2xxMH-C(C)
- affected Build date before 230821(Version before V4.1.60 are not affected)
Hikvision · DS-77xxNI-I4(B)
- affected Build date before 230821(Version before V4.1.60 are not affected)

References (1)

https://www.hikvision.com/en/support/cybersecurity/security-advisory/buffer-overflow-vulnerability-in-hikvision-nvr-dvr-devices/ (opens in a new tab)x_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2023-28811](https://cveledger.app/badge/CVE-2023-28811.svg)](https://cveledger.app/cve/CVE-2023-28811)

Record last updated 2 Aug 2024, 13:51 UTC.