CVE-2023-6894

MEDIUM

Hikvision Intercom Broadcasting System Log File system.html information disclosure

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-6894 has a selected CVSS score of 4.3 (medium).

Description

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK). It has been classified as problematic. This affects an unknown part of the file access/html/system.html of the component Log File Handler. The manipulation leads to information disclosure. The exploit has been disclosed to the public and may be used. Upgrading to version 4.1.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-248253 was assigned to this vulnerability.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated May 7, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Intercom Broadcasting System

Browse Hikvision / Intercom Broadcasting System
CVE List3.0.3_20201113_RELEASE(HIK)affected

References

4