VULNERABILITY INTELLIGENCE

CVE-2023-6893

CVSS score4.3 MEDIUM

EPSS probability70.22%

CISA KEVNot currently listed

Published2023-12-17

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK) and classified as problematic. Affected by this issue is some unknown functionality of the file /php/exportrecord.php. The manipulation of the argument downname with the input C:\ICPAS\Wnmp\WWW\php\conversion.php leads to path traversal. The exploit has been disclosed to the public and may be used. Upgrading to version 4.1.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-248252.

Weakness classification

cna@vuldb.com: CWE-22

Primary references

cna@vuldb.com — Exploit, Third Party Advisory
cna@vuldb.com — Permissions Required, Third Party Advisory
cna@vuldb.com — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory