CVE-2023-6096

HighCVSS 7.4/10Last modified Jun 17, 2026

Description

Vladimir Kononovich, a Security Researcher has found a flaw that using a inappropriate encryption logic on the DVR. firmware encryption is broken and allows to decrypt. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for details and workarounds.

Metrics

CVSS 3.1 7.4/10CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-668

Affected software

VendorProductVersions
Hanwha Vision Co., Ltd.HRX-16203.05.62 and prior versions
hanwhavisionxrn-2010*
hanwhavisionxrn-2010a*
hanwhavisionxrn-2011*
hanwhavisionxrn-2010*
hanwhavisionxrn-2010a*
hanwhavisionxrn-2011*
hanwhavisionxrn-2011a*
hanwhavisionxrn-3010a*
hanwhavisionarn-3250*
hanwhavisionxrn-810s*
hanwhavisionxrn-410s*
hanwhavisionqrn-810*
hanwhavisionqrn-410*
hanwhavisionhrx-1621*
hanwhavisionhrx-1620*
hanwhavisionhrx-821*
hanwhavisionhrx-820*
hanwhavisionhrx-421*
hanwhavisionhrx-420*
hanwhavisionxrn-420s*
hanwhavisionqrn-430s*
hanwhavisionqrn-430s*

References

Timeline

Published
Apr 26, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-60978.8A SQL injection vulnerability has been found in ICS Business Manager, affecting version 7.06.0028.7089. This vulnerability could allow a remCVE-2023-60986.1An XSS vulnerability has been discovered in ICS Business Manager affecting version 7.06.0028.7066. A remote attacker could send a specially CVE-2023-60999.8A vulnerability classified as critical has been found in Shenzhen Youkate Industrial Facial Love Cloud Payment System up to 1.0.55.0.0.1. ThCVE-2023-61005.3A vulnerability classified as problematic was found in Maiwei Safety Production Control Platform 4.1. This vulnerability affects unknown codCVE-2023-61017.5A vulnerability, which was classified as problematic, has been found in Maiwei Safety Production Control Platform 4.1. This issue affects soCVE-2023-61029.8A vulnerability, which was classified as problematic, was found in Maiwei Safety Production Control Platform 4.1. Affected is an unknown funCVE-2023-61035.4A vulnerability has been found in Intelbras RX 1500 1.1.9 and classified as problematic. Affected by this vulnerability is an unknown functiCVE-2023-61055.5An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-priCVE-2023-61093.7The YOP Poll plugin for WordPress is vulnerable to a race condition in all versions up to, and including, 6.5.26. This is due to improper reCVE-2023-61105.5A flaw was found in OpenStack. When a user tries to delete a non-existing access rule in it's scope, it deletes other existing access rules CVE-2023-61117.8A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. CVE-2023-61128.8Use after free in Navigation in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a