Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2023-28809 Details

Description

Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in. To exploit the vulnerability, attackers have to request the session ID at the same time as a valid user logs in, and gain device operation permissions by forging the IP and session ID of an authenticated user.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CNA: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://packetstormsecurity.com/files/174506/Hikvision-Access-Control-Session-Hijacking.html	CVE
https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-access-control-intercom/	CVE	Vendor Advisory
http://packetstormsecurity.com/files/174506/Hikvision-Access-Control-Session-Hijacking.html	[email protected]
https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-access-control-intercom/	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-384	Session Fixation	[email protected]
CWE-284	Improper Access Control	[email protected]

Affected Products

Product	Versions
hikvision ds-k1t320efwx firmware	All versions
CPE cpe:2.3:o:hikvision:ds-k1t320efwx_firmware:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t320efwx	All versions
CPE cpe:2.3:h:hikvision:ds-k1t320efwx:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t320efx firmware	All versions
CPE cpe:2.3:o:hikvision:ds-k1t320efx_firmware:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t320efx	All versions
CPE cpe:2.3:h:hikvision:ds-k1t320efx:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t320ewx firmware	All versions
CPE cpe:2.3:o:hikvision:ds-k1t320ewx_firmware:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t320ewx	All versions
CPE cpe:2.3:h:hikvision:ds-k1t320ewx:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t320ex firmware	All versions
CPE cpe:2.3:o:hikvision:ds-k1t320ex_firmware:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t320ex	All versions
CPE cpe:2.3:h:hikvision:ds-k1t320ex:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t320mfwx firmware	All versions
CPE cpe:2.3:o:hikvision:ds-k1t320mfwx_firmware:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t320mfwx	All versions
CPE cpe:2.3:h:hikvision:ds-k1t320mfwx:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t320mfx firmware	All versions
CPE cpe:2.3:o:hikvision:ds-k1t320mfx_firmware:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t320mfx	All versions
CPE cpe:2.3:h:hikvision:ds-k1t320mfx:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t320mwx firmware	All versions
CPE cpe:2.3:o:hikvision:ds-k1t320mwx_firmware:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t320mwx	All versions
CPE cpe:2.3:h:hikvision:ds-k1t320mwx:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t320mx firmware	All versions
CPE cpe:2.3:o:hikvision:ds-k1t320mx_firmware:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t320mx	All versions
CPE cpe:2.3:h:hikvision:ds-k1t320mx:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t341am firmware	All versions
CPE cpe:2.3:o:hikvision:ds-k1t341am_firmware:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t341am	All versions
CPE cpe:2.3:h:hikvision:ds-k1t341am:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t341amf firmware	All versions
CPE cpe:2.3:o:hikvision:ds-k1t341amf_firmware:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t341amf	All versions
CPE cpe:2.3:h:hikvision:ds-k1t341amf:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t341cm firmware	All versions
CPE cpe:2.3:o:hikvision:ds-k1t341cm_firmware:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t341cm	All versions
CPE cpe:2.3:h:hikvision:ds-k1t341cm:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t343ewx firmware	All versions
CPE cpe:2.3:o:hikvision:ds-k1t343ewx_firmware:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t343ewx	All versions
CPE cpe:2.3:h:hikvision:ds-k1t343ewx:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t343ex firmware	All versions
CPE cpe:2.3:o:hikvision:ds-k1t343ex_firmware:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t343ex	All versions
CPE cpe:2.3:h:hikvision:ds-k1t343ex:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t343mwx firmware	All versions
CPE cpe:2.3:o:hikvision:ds-k1t343mwx_firmware:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t343mwx	All versions
CPE cpe:2.3:h:hikvision:ds-k1t343mwx:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t343mx firmware	All versions
CPE cpe:2.3:o:hikvision:ds-k1t343mx_firmware:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t343mx	All versions
CPE cpe:2.3:h:hikvision:ds-k1t343mx:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t671 firmware	All versions
CPE cpe:2.3:o:hikvision:ds-k1t671_firmware:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t671	All versions
CPE cpe:2.3:h:hikvision:ds-k1t671:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t671m firmware	All versions
CPE cpe:2.3:o:hikvision:ds-k1t671m_firmware:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t671m	All versions
CPE cpe:2.3:h:hikvision:ds-k1t671m:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t671mf firmware	All versions
CPE cpe:2.3:o:hikvision:ds-k1t671mf_firmware:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t671mf	All versions
CPE cpe:2.3:h:hikvision:ds-k1t671mf:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t671t firmware	All versions
CPE cpe:2.3:o:hikvision:ds-k1t671t_firmware:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t671t	All versions
CPE cpe:2.3:h:hikvision:ds-k1t671t:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t671tm firmware	All versions
CPE cpe:2.3:o:hikvision:ds-k1t671tm_firmware:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t671tm	All versions
CPE cpe:2.3:h:hikvision:ds-k1t671tm:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t671tm-3xf firmware	All versions
CPE cpe:2.3:o:hikvision:ds-k1t671tm-3xf_firmware:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t671tm-3xf	All versions
CPE cpe:2.3:h:hikvision:ds-k1t671tm-3xf:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t671tmf firmware	All versions
CPE cpe:2.3:o:hikvision:ds-k1t671tmf_firmware:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t671tmf	All versions
CPE cpe:2.3:h:hikvision:ds-k1t671tmf:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t671tmfw firmware	All versions
CPE cpe:2.3:o:hikvision:ds-k1t671tmfw_firmware:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t671tmfw	All versions
CPE cpe:2.3:h:hikvision:ds-k1t671tmfw:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t671tmw firmware	All versions
CPE cpe:2.3:o:hikvision:ds-k1t671tmw_firmware:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t671tmw	All versions
CPE cpe:2.3:h:hikvision:ds-k1t671tmw:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t804af firmware	All versions
CPE cpe:2.3:o:hikvision:ds-k1t804af_firmware:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t804af	All versions
CPE cpe:2.3:h:hikvision:ds-k1t804af:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t804amf firmware	All versions
CPE cpe:2.3:o:hikvision:ds-k1t804amf_firmware:-:::::::* Remediation No remediation found in references.
hikvision ds-k1t804amf	All versions
CPE cpe:2.3:h:hikvision:ds-k1t804amf:-:::::::* Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Sep 5, 2023	CVE Modified	[email protected]
Jun 30, 2023	Initial Analysis	[email protected]

CVE-2023-28809 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation