CVE-2023-28808 : Security Advisory and Response

An access control vulnerability has been identified in some Hikvision Hybrid SAN/Cluster Storage products, potentially granting unauthorized access to admin permissions. This CVE was published on April 11, 2023, by Hikvision.

Understanding CVE-2023-28808

This section will delve into the specifics of the CVE-2023-28808 vulnerability affecting certain Hikvision Hybrid SAN/Cluster Storage products.

What is CVE-2023-28808?

CVE-2023-28808 pertains to an access control vulnerability in specific Hikvision storage products that could allow malicious actors to gain admin privileges through the exploitation of crafted messages.

The Impact of CVE-2023-28808

This critical vulnerability poses a significant risk as attackers with access to the affected devices could potentially compromise the confidentiality and integrity of stored data.

Technical Details of CVE-2023-28808

To better understand the technical aspects of CVE-2023-28808, the following information is crucial:

Vulnerability Description

The vulnerability stems from improper access control implementation, enabling threat actors to manipulate messages to acquire admin permissions, leading to unauthorized access.

Affected Systems and Versions

Hikvision products including DS-A71024/48/72R, DS-A80624S, DS-A81016S, DS-A72024/72R, DS-A80316S, and DS-A82024D running versions up to V2.3.8-8 (V2.X) are impacted. Additionally, DS-A71024/48R-CVS and DS-A72024/48R-CVS versions up to V1.1.4 (V1.X) are also affected.

Exploitation Mechanism

The vulnerability can be exploited remotely by sending carefully crafted messages to the vulnerable Hikvision storage devices, allowing unauthorized users to elevate their privileges.

Mitigation and Prevention

Protecting systems from CVE-2023-28808 requires immediate actions and long-term security practices along with consistent patching and updates.

Immediate Steps to Take

It is recommended to apply security solutions provided by Hikvision to address the vulnerability promptly and prevent potential exploitation.

Long-Term Security Practices

Implementing strong access controls, network segmentation, regular security audits, and employee training on recognizing phishing attempts can enhance overall security posture.

Patching and Updates

Regularly monitor for security updates from Hikvision and promptly apply patches to mitigate vulnerabilities and strengthen system defenses against potential threats.