CVE-2023-28811

There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models

High · published November 23, 2023

CVSS v3.1
7.4
EPSS
0%
Percentile
32.2
In the wild
Unconfirmed
What it is

There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00394 · 32.2th percentile
Published
2023-11-23T06:42Z
EPSS history
Timeline
  • 23 NOV 06:42Z
    There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models
    cvelistv5