Critical severity9.1NVD Advisory· Published Apr 11, 2023· Updated Jun 17, 2026
CVE-2023-28808
CVE-2023-28808
Description
Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the admin permission. The attacker can exploit the vulnerability by sending crafted messages to the affected devices.
Affected products
14- cpe:2.3:o:hikvision:ds-a71048r-cvs_firmware:*:*:*:*:*:*:*:*Range: <=1.1.4
- cpe:2.3:o:hikvision:ds-a71072r_firmware:*:*:*:*:*:*:*:*Range: <=2.3.8-8
cpe:2.3:o:hikvision:ds-a72072r_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:hikvision:ds-a72072r_firmware:*:*:*:*:*:*:*:*range: <=2.3.8-8
- cpe:2.3:o:hikvision:ds-a72072r_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:hikvision:ds-a80316s_firmware:*:*:*:*:*:*:*:*Range: <=2.3.8-8
- cpe:2.3:o:hikvision:ds-a80624s_firmware:*:*:*:*:*:*:*:*Range: <=2.3.8-8
- cpe:2.3:o:hikvision:ds-a81016s_firmware:*:*:*:*:*:*:*:*Range: <=2.3.8-8
- cpe:2.3:o:hikvision:ds-a82024d_firmware:*:*:*:*:*:*:*:*Range: <=2.3.8-8
- hikvision/DS-A71024/48/72R,DS-A80624S,DS-A81016S,DS-A72024/72R,DS-A80316S,DS-A82024Dv5Range: V2.X
- hikvision/DS-A71024/48R-CVS,DS-A72024/48R-CVSv5Range: V1.X
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.