CVE:CVE-2023-28809
CNNVD:CNNVD-202306-1220
Hikvision DS-K1T和Hikvision DS-KH都是中国海康威视（Hikvision）公司的一系列门禁系统。
Hikvision Access Control Products存在安全漏洞，该漏洞源于用户登录成功后不会更新会话ID，导致易受到会话劫持攻击。以下产品及版本受到影响：Hikvision DS-K1T,Hikvision DS-KH。
solution:Upgrade hikvision ds-k1t320efwx_firmware to a higher version than -; Upgrade hikvision ds-k1t320efx_firmware to a higher version than -; Upgrade hikvision ds-k1t320ewx_firmware to a higher version than -; Upgrade hikvision ds-k1t320ex_firmware to a higher version than -; Upgrade hikvision ds-k1t320mfwx_firmware to a higher version than -; Upgrade hikvision ds-k1t320mfx_firmware to a higher version than -; Upgrade hikvision ds-k1t320mwx_firmware to a higher version than -; Upgrade hikvision ds-k1t320mx_firmware to a higher version than -; Upgrade hikvision ds-k1t341am_firmware to a higher version than -; Upgrade hikvision ds-k1t341amf_firmware to a higher version than -; Upgrade hikvision ds-k1t341cm_firmware to a higher version than -; Upgrade hikvision ds-k1t343ewx_firmware to a higher version than -; Upgrade hikvision ds-k1t343ex_firmware to a higher version than -; Upgrade hikvision ds-k1t343mwx_firmware to a higher version than -; Upgrade hikvision ds-k1t343mx_firmware to a higher version than -; Upgrade hikvision ds-k1t671_firmware to a higher version than -; Upgrade hikvision ds-k1t671m_firmware to a higher version than -; Upgrade hikvision ds-k1t671mf_firmware to a higher version than -; Upgrade hikvision ds-k1t671t_firmware to a higher version than -; Upgrade hikvision ds-k1t671tm_firmware to a higher version than -; Upgrade hikvision ds-k1t671tm-3xf_firmware to a higher version than -; Upgrade hikvision ds-k1t671tmf_firmware to a higher version than -; Upgrade hikvision ds-k1t671tmfw_firmware to a higher version than -; Upgrade hikvision ds-k1t671tmw_firmware to a higher version than -; Upgrade hikvision ds-k1t804af_firmware to a higher version than -; Upgrade hikvision ds-k1t804amf_firmware to a higher version than -