What is CVE-2023-6096?

CVE-2023-6096 is a high-severity vulnerability in Hanwha Vision Co., Ltd. Hrx-1620, classified under Exposure of Resource to Wrong Sphere. CVSS score: 7.4/10. Published 2024-04-26.

How severe is CVE-2023-6096?

High severity. CVSS v3 base score is 7.4 out of 10.

Vulnerability in Hanwha Vision Co., Ltd. Hrx-1620

CVE-2023-6096

Vladimir Kononovich, a Security Researcher has found a flaw that using a inappropriate encryption logic on the DVR. firmware encryption is broken and allows to decrypt. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

EPSS: 0.001 (1.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.4 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Hanwha Vision Co., Ltd. Hrx-1620 — versions 3.05.62 and prior versions

Weakness classification (CWE)

CWE-668 — Exposure of Resource to Wrong Sphere

References

fc9afe74-3f80-4fb7-a313-e6f036a89882

Frequently asked questions

What is CVE-2023-6096?: CVE-2023-6096 is a high-severity vulnerability in Hanwha Vision Co., Ltd. Hrx-1620, classified under Exposure of Resource to Wrong Sphere. CVSS score: 7.4/10. Published 2024-04-26.
How severe is CVE-2023-6096?: High severity. CVSS v3 base score is 7.4 out of 10.