PT-2023-32804 · Hikvision · Hikvision Intercom Broadcasting System

Willchen · Publicado 2023-12-17 · Atualizado 2024-05-17 · CVE-2023-6894

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Hikvision Intercom Broadcasting System version 3.0.3 20201113 RELEASE(HIK)

Description A vulnerability was found in the Log File Handler component, affecting an unknown part of the file access/html/system.html. The manipulation leads to information disclosure. The exploit has been disclosed to the public and may be used.

Recommendations For Hikvision Intercom Broadcasting System version 3.0.3 20201113 RELEASE(HIK), upgrade to version 4.1.0 to address this issue. It is recommended to upgrade the affected component. As a temporary workaround, consider restricting access to the access/html/system.html file until the issue is resolved.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2023-6894

Produtos afetados

Hikvision Intercom Broadcasting System

Referências · 8

• 🔥 https://github.com/willchen0011/cve/blob/main/unaccess.md · Exploit
• https://t.me/cvenotify/63903 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-6894 · Nota de Segurança
• https://vuldb.com/?ctiid.248253 · Nota
• https://t.me/cvenotify/64102 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-6894 · Aviso do Fabricante
• https://t.me/cvenotify/64738 · Publicação no Telegram
• https://vuldb.com/?id.248253 · Nota