CVE-2023-6895

CVE Enrichment

CVSS: 9.8 CRITICAL
EPSS: 89.03%
EPSS Percentile: 99.78%
CISA KEV: Not listed

Description

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK). It has been declared as critical. This vulnerability affects unknown code of the file /php/ping.php. The manipulation of the argument jsondata[ip] with the input netstat -ano leads to os command injection. The exploit has been disclosed to the public and may be used. Upgrading to version 4.1.0 is able to address this issue. It is recommended to upgrade the affected component. VDB-248254 is the identifier assigned to this vulnerability.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 17-Dec-2023 15:15
Last Modified: 17-Jun-2026 13:51
EPSS Date: 2026-11-09
CWE: CWE-78

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:N /
                            UI:N /
                            S:U /
                            C:H /
                            I:H /
                            A:H

CNA Products / Version Status

Hikvision · Intercom Broadcasting System Source: CNA · [email protected]
Default status: unknown

3.0.3_20201113_RELEASE(HIK) — affected

Affected Products / Versions

hikvision / intercom_broadcast_system Source: NVD CPE · affected
Version / affected range: * · from (inclusive) 3.0.3 · before (exclusive) 4.1.0
cpe:2.3:o:hikvision:intercom_broadcast_system:*:*:*:*:*:*:*:*

References

Last enrichment sync: 09-Nov-2026 22:52
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

was performed using known CVEs to gather intelligence: (‘scanning for vulnerable cameras using CVE-2023-6895 and CVE-2017-7921’). Seedworm Activity Found Across U.S. and Canadian Organizations as New Backdoors Emerge

CVE (1)

Malware (10)

People (4)

Threat Actors (19)

MITRE ATT&CK (11)

Vendors (2)

Products (1)

Tools (5)

Industries (2)

Countries (4)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.