Skip to content
Fencer Vulns
high 7.5

CVE-2023-28809 json

Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user s…

published 2023-06-15 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-32444

cvss
7.5
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.6%
EPSS 0.6% chance of exploitation in 30 days, percentile 50%
public exploits
0
none known

Summary

Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in. To exploit the vulnerability, attackers have to request the session ID at the same time as a valid user logs in, and gain device operation permissions by forging the IP and session ID of an authenticated user.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-23-285-14 updated cvss 7.5

Hikvision Access Control and Intercom Products

  • Hikvision DS-K1T320XXX <=3.5.0_build220706 Hikvision DS-K1T341AXX <=3.2.30_build221223 Hikvision DS-K1T341C <=3.3.8_build230112 Hikvision DS-K1T343XXX <=3.14.0_build230117 Hikvision DS-K1T671XXX <=3.2.30_build221223 Hikvision DS-K1T804AXX <=1.4.0_build221212
    +5 more products
    Hikvision DS-KH62 Series <=1.4.62_build220414 Hikvision DS-KH63 Series <=2.2.8_build230219 Hikvision DS-KH85 Series <=2.2.8_build230219 Hikvision DS-KH9310-WTE1(B) <=2.1.76_build230204 Hikvision DS-KH9510-WTE1(B) <=2.1.76_build230204
    affected: mitigation “Hikvision recommends users download patches/updates to mitigate these vulnerabilities. The upgrade can be downloaded from the Hikvision official website.” hikvision.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
22 mo ago

Exploit prediction

0.64% chance of exploitation in the next 30 days, higher than 50% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD 3.1 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

  • hikvision DS-K1T804AXX
  • hikvision DS-K1T341AXX
  • hikvision DS-K1T671XXX
  • hikvision DS-K1T343XXX
  • hikvision DS-K1T341C
  • hikvision DS-K1T320XXX

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.