CVE-2023-28812

CRITICAL 9.1

CVSS Score

9.1

EPSS Score

0.0%

EPSS Percentile

0th

There is a buffer overflow vulnerability in a web browser plug-in could allow an attacker to exploit the vulnerability by sending crafted messages to computers installed with this plug-in, which could lead to arbitrary code execution or cause process exception of the plug-in.

Vendor	hikvision
Product	localservicecomponents
Published	Nov 23, 2023
Last Updated	Dec 2, 2024

Stay Ahead of the Next One

Get instant alerts for hikvision localservicecomponents

Be the first to know when new critical vulnerabilities affecting hikvision localservicecomponents are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

High

Affected Versions

Hikvision / LocalServiceComponents

version 1.0.0.78 and the versions prior to it

References

NVD ↗ CVE.org ↗ EPSS Data ↗

hikvision.com: https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-hikvision-web-browser-plug-in-locals/

Credits

KITRI BoB 12th