CVE-2023-6096
Assigner: Hanwha_Vision
Published: 2024-04-26T07:16:12.080Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: HRX-1620
vendor: Hanwha Vision Co., Ltd.
versions: status: affected
version: 3.05.62 and prior versions
datePublic: 2024-04-26T07:08:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: 

<div><div>Vladimir Kononovich, a Security Researcher has found a flaw that using a inappropriate encryption logic on the DVR. firmware encryption is broken and allows to decrypt. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.</div><br></div>


value: 
Vladimir Kononovich, a Security Researcher has found a flaw that using a inappropriate encryption logic on the DVR. firmware encryption is broken and allows to decrypt. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.


metrics: cvssV3_1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.4
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-668
description: CWE-668 Exposure of Resource to Wrong Sphere
type: CWE
source: discovery: UNKNOWN
title: using a inappropriate encryption logic
x_generator: engine: Vulnogram 0.1.0-dev