nvd-json-data-feeds/CVE-2023/CVE-2023-68xx/CVE-2023-6894.json

{
  "id": "CVE-2023-6894",
  "sourceIdentifier": "cna@vuldb.com",
  "published": "2023-12-17T08:15:06.833",
  "lastModified": "2024-11-21T08:44:46.827",
  "vulnStatus": "Modified",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK). It has been classified as problematic. This affects an unknown part of the file access/html/system.html of the component Log File Handler. The manipulation leads to information disclosure. The exploit has been disclosed to the public and may be used. Upgrading to version 4.1.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-248253 was assigned to this vulnerability."
    },
    {
      "lang": "es",
      "value": "Se encontr\u00f3 una vulnerabilidad en Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK). Ha sido clasificada como problem\u00e1tica. Una parte desconocida del archivo access/html/system.html del componente Log File Handler afecta a una parte desconocida. La manipulaci\u00f3n conduce a la divulgaci\u00f3n de informaci\u00f3n. El exploit ha sido divulgado al p\u00fablico y puede utilizarse. A esta vulnerabilidad se le asign\u00f3 el identificador VDB-248253. NOTA: Se contact\u00f3 primeramente con el proveedor sobre esta divulgaci\u00f3n, pero no respondi\u00f3 de ninguna manera."
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "cna@vuldb.com",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "baseScore": 4.3,
          "baseSeverity": "MEDIUM",
          "attackVector": "ADJACENT_NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 1.4
      },
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 3.6
      }
    ],
    "cvssMetricV2": [
      {
        "source": "cna@vuldb.com",
        "type": "Secondary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:A/AC:L/Au:N/C:P/I:N/A:N",
          "baseScore": 3.3,
          "accessVector": "ADJACENT_NETWORK",
          "accessComplexity": "LOW",
          "authentication": "NONE",
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "baseSeverity": "LOW",
        "exploitabilityScore": 6.5,
        "impactScore": 2.9,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "weaknesses": [
    {
      "source": "cna@vuldb.com",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    },
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "configurations": [
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:hikvision:intercom_broadcast_system:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "3.0.3",
              "versionEndExcluding": "4.1.0",
              "matchCriteriaId": "39CE5FB3-D552-4149-A2B8-4D6EA9B02E2A"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kd-bk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "958036E7-556B-4211-91F2-B03FD7B9BD48"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kd-dis:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E42EB382-C853-405D-B3D6-777CA0750270"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kd-e:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C12AC351-A6DB-4F58-899A-FE625DA97219"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kd-in:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "51038A2A-4C52-4029-8ECB-B33018681439"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kd-info:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F62F9A95-A31C-4047-81D2-0CD30449A71A"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kd-kk:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "00241160-697B-4177-97AE-9B98EBF962A8"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kd-kk\\/s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E47560E1-FC85-44C0-8804-5426062ADBB3"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kd-kp:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "187E6DA2-2909-489A-86B6-AEF22B5E81D3"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kd-kp\\/s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "653905C8-EED2-4EF6-A19C-740D93AD2C59"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kd-m:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C9CEE9CB-03CD-4220-9B89-1C5C8A9FE1B0"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kd3003-e6:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "42374DAF-62B0-41FF-91D2-E8410BCE6B69"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kd8003ime1\\(b\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DF0DE650-B929-4F05-B2D1-CE59ADBF05A4"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kd8003ime1\\(b\\)\\/flush:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5640AA88-730E-43FB-88D2-F3D65396DE15"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kd8003ime1\\(b\\)\\/ns:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DF2F30EE-469B-42E5-9570-6D26C37460A6"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kd8003ime1\\(b\\)\\/s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "96F5783F-87ED-4AAE-801B-27D287991A7B"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kd8003ime1\\(b\\)\\/surface:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "926B6EE1-7CF4-4A99-9C6F-7DDC26C9A702"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kh6220-le1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "547F6609-4304-4CB8-A07A-2C3D2E7241E8"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kh6320-le1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E4DAC9C0-6A97-4AA2-9FBE-58E5E1D11666"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kh6320-tde1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3BC79E9F-0971-46B0-B0AB-062AB4653345"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kh6320-te1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4BD7D924-84B8-4253-995C-A1E74B3C329C"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kh6320-wtde1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF4C1CB8-96D8-4E28-B85A-29D05BE4C272"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kh6320-wte1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "97264003-9B83-444C-ADEF-5F0E61C96618"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kh6350-wte1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9562CB3D-9491-407C-9A59-0F0C48D724BA"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kh6351-te1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FA19A366-0EE7-45D2-A3B2-4EE397FBA95A"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kh6351-wte1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B61ABFF8-5AD3-4367-AA3E-E36DCD93ABE6"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kh63le1\\(b\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7B1FDC90-73BA-4691-B942-AE30CA342C9A"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kh8520-wte1:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "97280A4A-0EFE-418C-9E94-92239E463163"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kh9310-wte1\\(b\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B3244947-9255-48E0-9491-CD2DFBF21943"
            },
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:hikvision:ds-kh9510-wte1\\(b\\):-:*:*:*:*:*:*:*",
              "matchCriteriaId": "62E1B212-E667-4FC0-AF02-116F58D917F2"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/willchen0011/cve/blob/main/unaccess.md",
      "source": "cna@vuldb.com",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ]
    },
    {
      "url": "https://vuldb.com/?ctiid.248253",
      "source": "cna@vuldb.com",
      "tags": [
        "Permissions Required",
        "Third Party Advisory"
      ]
    },
    {
      "url": "https://vuldb.com/?id.248253",
      "source": "cna@vuldb.com",
      "tags": [
        "Third Party Advisory"
      ]
    },
    {
      "url": "https://github.com/willchen0011/cve/blob/main/unaccess.md",
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ]
    },
    {
      "url": "https://vuldb.com/?ctiid.248253",
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Permissions Required",
        "Third Party Advisory"
      ]
    },
    {
      "url": "https://vuldb.com/?id.248253",
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ]
    }
  ]
}