Approved changes feed: RSS · Atom

cpe:2.3:h:hikvision:ds-k1t341cm:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorHikvision (fb070281-910c-5fa3-9cfd-2df1ea206306)
ProductDs K1T341Cm (b432dba7-0b13-569f-97de-4e18a9bce74e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-28809 not_vulnerable 2026-06-08 06:02:35.838949 Details available
HIGH (7.5)
Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in. To exploit the vulnerability, attackers have to request the session ID at the same time as a valid user logs in, and gain device operation permissions by forging the IP and session ID of an authenticated user.
Published: 2023-06-15T00:00:00.000Z
Updated: 2024-12-18T16:24:05.385Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.