CVE-2023-28809

highPriorität · verfolgen · 30EPSS 0.006 · 50. PerzentilEUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.64% (50th) EPSS

CVSS 7.5 · high

Is it mine?

54 products

Prüfe deine Angriffsfläche

Who says so?

3 sources

cnnvd · enisa_euvd · cisa_csaf_ot

EPSS · bewertet 2026-10-28

Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in. To exploit the vulnerability, attackers have to request the session ID at the same time as a valid user logs in, and gain device operation permissions by forging the IP and session ID of an authenticated user.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.

MitigationDS-K1T320XXXcisa_csaf_ot
Hikvision recommends users download patches/updates to mitigate these vulnerabilities. The upgrade can be downloaded from the Hikvision official website.
https://www.hikvision.com/en/support/download/firmware/
MitigationDS-K1T341AXXcisa_csaf_ot
Hikvision recommends users download patches/updates to mitigate these vulnerabilities. The upgrade can be downloaded from the Hikvision official website.
https://www.hikvision.com/en/support/download/firmware/
MitigationDS-K1T341Ccisa_csaf_ot
Hikvision recommends users download patches/updates to mitigate these vulnerabilities. The upgrade can be downloaded from the Hikvision official website.
https://www.hikvision.com/en/support/download/firmware/
MitigationDS-K1T343XXXcisa_csaf_ot
Hikvision recommends users download patches/updates to mitigate these vulnerabilities. The upgrade can be downloaded from the Hikvision official website.
https://www.hikvision.com/en/support/download/firmware/
MitigationDS-K1T671XXXcisa_csaf_ot
Hikvision recommends users download patches/updates to mitigate these vulnerabilities. The upgrade can be downloaded from the Hikvision official website.
https://www.hikvision.com/en/support/download/firmware/
MitigationDS-K1T804AXXcisa_csaf_ot
Hikvision recommends users download patches/updates to mitigate these vulnerabilities. The upgrade can be downloaded from the Hikvision official website.
https://www.hikvision.com/en/support/download/firmware/
MitigationDS-KH62 Seriescisa_csaf_ot
Hikvision recommends users download patches/updates to mitigate these vulnerabilities. The upgrade can be downloaded from the Hikvision official website.
https://www.hikvision.com/en/support/download/firmware/
MitigationDS-KH63 Seriescisa_csaf_ot
Hikvision recommends users download patches/updates to mitigate these vulnerabilities. The upgrade can be downloaded from the Hikvision official website.
https://www.hikvision.com/en/support/download/firmware/
MitigationDS-KH85 Seriescisa_csaf_ot
Hikvision recommends users download patches/updates to mitigate these vulnerabilities. The upgrade can be downloaded from the Hikvision official website.
https://www.hikvision.com/en/support/download/firmware/
MitigationDS-KH9310-WTE1(B)cisa_csaf_ot
Hikvision recommends users download patches/updates to mitigate these vulnerabilities. The upgrade can be downloaded from the Hikvision official website.
https://www.hikvision.com/en/support/download/firmware/
MitigationDS-KH9510-WTE1(B)cisa_csaf_ot
Hikvision recommends users download patches/updates to mitigate these vulnerabilities. The upgrade can be downloaded from the Hikvision official website.
https://www.hikvision.com/en/support/download/firmware/

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 6.9–7.5

v3.17.5highCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 1.6 · Auswirkung 5.9

v3.07.5highCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · CISA US

v3.17.5highCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.17.5highCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:Hsecondary · hsrc@hikvision.comAusnutzbarkeit 1.6 · Auswirkung 5.9

v3.16.9mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-384USprimärCWE-284USCWE-384US

betroffene Produkte (54)

Betroffene Produkte und Versionsbereiche.

DS-K1T320XXX: <=3.5.0_build220706alle Versionencisa_csaf_otUS
DS-K1T341AXX: <=3.2.30_build221223alle Versionencisa_csaf_otUS
DS-K1T341C: <=3.3.8_build230112alle Versionencisa_csaf_otUS
DS-K1T343XXX: <=3.14.0_build230117alle Versionencisa_csaf_otUS
DS-K1T671XXX: <=3.2.30_build221223alle Versionencisa_csaf_otUS
DS-K1T804AXX: <=1.4.0_build221212alle Versionencisa_csaf_otUS
DS-KH62 Series: <=1.4.62_build220414alle Versionencisa_csaf_otUS
DS-KH63 Series: <=2.2.8_build230219alle Versionencisa_csaf_otUS
DS-KH85 Series: <=2.2.8_build230219alle Versionencisa_csaf_otUS
DS-KH9310-WTE1(B): <=2.1.76_build230204alle Versionencisa_csaf_otUS
DS-KH9510-WTE1(B): <=2.1.76_build230204alle Versionencisa_csaf_otUS
Hikvision DS-K1T320XXX≤ 3.5.0_build220706cisa_csaf_otUS
Hikvision DS-K1T341AXX≤ 3.2.30_build221223cisa_csaf_otUS
Hikvision DS-K1T341C≤ 3.3.8_build230112cisa_csaf_otUS
Hikvision DS-K1T343XXX≤ 3.14.0_build230117cisa_csaf_otUS
Hikvision DS-K1T671XXX≤ 3.2.30_build221223cisa_csaf_otUS
Hikvision DS-K1T804AXX≤ 1.4.0_build221212cisa_csaf_otUS
Hikvision DS-KH62 Series≤ 1.4.62_build220414cisa_csaf_otUS
Hikvision DS-KH63 Series≤ 2.2.8_build230219cisa_csaf_otUS
Hikvision DS-KH85 Series≤ 2.2.8_build230219cisa_csaf_otUS

20 von 54 angezeigt

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

ICSA-23-285-14Hikvision Access Control and Intercom Products2023-10-12icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could result in an attacker hijacking a session and gaining device operation permissions, or result in an attacker modifying device network configuration by sending specific data packets to a vulnerable interface within the same local network.

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd cisa_csaf_ot NVD CVE.org MITRE

veröffentlicht 2023-06-15geändert 2026-06-17

verwandt (609)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2026-102489US	critical9.8OT kritisch	1.96% (80th)	KEV	2026-09-30
Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as the zammad user. The bug is also present in version 7.0.0 to ver…
CVE-2018-11714US	critical9.8	67.1% (99th)	Exploit	2018-06-04
An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0 Build 170622 Rel.64334n devices. T…
CVE-2018-18925US	critical9.8	31.1% (98th)	Exploit	2018-11-04
Gogs 0.11.66 allows remote code execution because it does not properly validate session IDs, as demonstrated by a ".." session-file forgery in the file session provider in file.go.…
CVE-2017-12965US	critical9.8	15.7% (97th)	Exploit	2017-08-23
Session fixation vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack web sessions via the PHPSESSID parameter.
CVE-2019-10008US	high8.8	19.4% (97th)	Exploit	2019-04-24
Zoho ManageEngine ServiceDesk 9.3 allows session hijacking and privilege escalation because an established guest session is automatically converted into an established administrato…

+604 weitere

Referenzen (8)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan