Approved changes feed: RSS · Atom

cpe:2.3:o:hikvision:ds-k1t671t_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorHikvision (fb070281-910c-5fa3-9cfd-2df1ea206306)
ProductDs K1T671T Firmware (e26dc610-2c14-50a0-8908-0da72c87dcd3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-28809 vulnerable 2026-06-08 06:02:35.850654 Details available
HIGH (7.5)
Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in. To exploit the vulnerability, attackers have to request the session ID at the same time as a valid user logs in, and gain device operation permissions by forging the IP and session ID of an authenticated user.
Published: 2023-06-15T00:00:00.000Z
Updated: 2024-12-18T16:24:05.385Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.