Medium severity4.3NVD Advisory· Published Dec 17, 2023· Updated Jun 17, 2026

CVE-2023-6893

Description

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK) and classified as problematic. Affected by this issue is some unknown functionality of the file /php/exportrecord.php. The manipulation of the argument downname with the input C:\ICPAS\Wnmp\WWW\php\conversion.php leads to path traversal. The exploit has been disclosed to the public and may be used. Upgrading to version 4.1.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-248252.

Affected products

Hikvision/Intercom Broadcasting Systemcpe-rescue2 versions
3.0.3_20201113_RELEASE(HIK)+ 1 more
- (no CPE)range: 3.0.3_20201113_RELEASE(HIK)
- (no CPE)range: 3.0.3_20201113_RELEASE(HIK)
Hikvision/Intercom Broadcast System
cpe:2.3:o:hikvision:intercom_broadcast_system:*:*:*:*:*:*:*:*
Range: >=3.0.3,<4.1.0

Patches

Vulnerability mechanics

References

github.com/willchen0011/cve/blob/main/download.mdnvdExploitThird Party Advisory
vuldb.comnvdPermissions RequiredThird Party Advisory
vuldb.comnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.056
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000