CVE-2023-28810

MEDIUM

Access Control/Intercom < - Info Disclosure

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2023-28810. PoCs published by skylightcyber.

AI-analyzed exploit summary This repository contains functional exploit code for CVE-2023-28810, targeting Hikvision intercom devices. It includes scripts for unauthenticated configuration changes, password brute-forcing, and SIP-based ghost calling.

Description

Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. Attackers can modify device network configuration by sending specific data packets to the vulnerable interface within the same local network.

Exploits (1)

nomisec WORKING POC

by skylightcyber · poc

https://github.com/skylightcyber/CVE-2023-28810

View Code ZIP pw:eip

This repository contains functional exploit code for CVE-2023-28810, targeting Hikvision intercom devices. It includes scripts for unauthenticated configuration changes, password brute-forcing, and SIP-based ghost calling.

Classification

Working Poc 95%

Attack Type

Auth Bypass

Complexity

Moderate

Reliability

Reliable

Target: Hikvision intercom devices

No auth needed

Prerequisites: Network access to the target device · Knowledge of the target device's MAC address

MITRE ATT&CK

T1110 - Brute Force T1068 - Exploitation for Privilege Escalation

mistral-large-3 · analyzed Feb 19, 2026 Full analysis →

References (1)

Core 1

Core References

Vendor Advisory

https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-access-control-intercom/

Scores

CVSS v3 4.3

EPSS 0.1040

EPSS Percentile 95.2%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-284

Status published

Products (37)

hikvision/ds-k1t320efwx_firmware < 3.5.0_build220706

hikvision/ds-k1t320efx_firmware < 3.5.0_build220706

hikvision/ds-k1t320ewx_firmware < 3.5.0_build220706

hikvision/ds-k1t320ex_firmware < 3.5.0_build220706

hikvision/ds-k1t320mfwx_firmware < 3.5.0_build220706

hikvision/ds-k1t320mfx_firmware < 3.5.0_build220706

hikvision/ds-k1t320mwx_firmware < 3.5.0_build220706

hikvision/ds-k1t320mx_firmware < 3.5.0_build220706

hikvision/ds-k1t341am_firmware < 3.2.30_build221223

hikvision/ds-k1t341amf_firmware < 3.2.30_build221223

... and 27 more

Published Jun 15, 2023

Tracked Since Feb 18, 2026