CVE-2023-28811: Hikvision Ds-7104ni-q1(c) Firmware

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.

Affected products

• Hikvision Ds-7104ni-q1(c) Firmware: before 4.1.60 (fixed in 4.1.60)
• Hikvision Ds-7104ni-q1(d) Firmware: before 4.1.60 (fixed in 4.1.60)
• Hikvision Ds-7108ni-q1(c) Firmware: before 4.1.60 (fixed in 4.1.60)
• Hikvision Ds-7108ni-q1(d) Firmware: before 4.1.60 (fixed in 4.1.60)
• Hikvision Ds-7604ni-k1(c) Firmware: before 4.1.60 (fixed in 4.1.60)
• Hikvision Ds-7604ni-k1/4p/4g(c) Firmware: before 4.1.60 (fixed in 4.1.60)
• Hikvision Ds-7604ni-q1(c) Firmware: before 4.1.60 (fixed in 4.1.60)
• Hikvision Ds-7604ni-q1/4p(c) Firmware: before 4.1.60 (fixed in 4.1.60)
• Hikvision Ds-7608ni-k1/8p(c) Firmware: before 4.1.60 (fixed in 4.1.60)
• Hikvision Ds-7608ni-k1/8p/4g(c) Firmware: before 4.1.60 (fixed in 4.1.60)
• Hikvision Ds-7608ni-q1(c) Firmware: before 4.1.60 (fixed in 4.1.60)
• Hikvision Ds-7608ni-q1/8p(c) Firmware: before 4.1.60 (fixed in 4.1.60)
• Hikvision Ds-7608ni-q2(c) Firmware: before 4.1.60 (fixed in 4.1.60)
• Hikvision Ds-7608ni-q2/8p(c) Firmware: before 4.1.60 (fixed in 4.1.60)
• Hikvision Ds-7616ni-k1(c) Firmware: before 4.1.60 (fixed in 4.1.60)
• Hikvision Ds-7616ni-q1(c) Firmware: before 4.1.60 (fixed in 4.1.60)
• Hikvision Ds-7616ni-q2(c) Firmware: before 4.1.60 (fixed in 4.1.60)
• Hikvision Ds-7616ni-q2/16p(c) Firmware: before 4.1.60 (fixed in 4.1.60)
• Hikvision Dvr Firmware: before 4.1.60 (fixed in 4.1.60)
• Hikvision NVR-104mh-C(c) Firmware: before 4.1.60 (fixed in 4.1.60)
• Hikvision NVR-104mh-C(d) Firmware: before 4.1.60 (fixed in 4.1.60)
• Hikvision NVR-104mh-c/4p(d) Firmware: before 4.1.60 (fixed in 4.1.60)
• Hikvision NVR-104mh-D(c) Firmware: before 4.1.60 (fixed in 4.1.60)
• Hikvision NVR-104mh-D(d) Firmware: before 4.1.60 (fixed in 4.1.60)
• Hikvision NVR-104mh-d/4p(c) Firmware: before 4.1.60 (fixed in 4.1.60)
• and 15 more

Published 2023-11-23. Last modified 2026-06-17.