Ds K1T804Axx
Approved changes feed: RSS · Atom
cpe:2.3:a:hikvision:ds-k1t804axx:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hikvision (fb070281-910c-5fa3-9cfd-2df1ea206306) |
|---|---|
| Product | Ds K1T804Axx (50f8a0f8-3757-59a8-8ea1-4c7fdab92b1e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-28810 |
vulnerable | 2026-06-08 06:02:35.868841 |
Details available
MEDIUM (4.3)
Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.
Published: 2023-06-15T00:00:00.000Z
Updated: 2024-12-12T21:10:28.899Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-28809 |
vulnerable | 2026-06-08 06:02:35.817243 |
Details available
HIGH (7.5)
Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in. To exploit the vulnerability, attackers have to request the session ID at the same time as a valid user logs in, and gain device operation permissions by forging the IP and session ID of an authenticated user.
Published: 2023-06-15T00:00:00.000Z
Updated: 2024-12-18T16:24:05.385Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.