CVE-2023-28811 (published 2023-11-23T06:42:01.522Z)
There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
Affected products: Vendor: Hikvision
Product: iDS-EXXHUH
Versions: Build date before 230821(Version  before  V4.1.60  are not affected)