Hikvision Localservicecomponents vulnerabilities

2 CVEs affecting Hikvision Localservicecomponents, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-28813, published 2023-11-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-28812, published 2023-11-23. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. There is a buffer overflow vulnerability in a web browser plug-in could allow an attacker to exploit the vulnerability by sending crafted messages to computers installed with this plug-in, which…
CVE-2023-28813, published 2023-11-23. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. An attacker could exploit a vulnerability by sending crafted messages to computers installed with this plug-in to modify plug-in parameters, which could cause affected computers to download malicious…