Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
111 vulnerabilities by Hikvision
CVE-2026-61392 (GCVE-0-2026-61392)
Vulnerability from nvd – Published: 2026-07-22 11:03 – Updated: 2026-07-22 12:29
VLAI
EPSS
VEX
Summary
There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain partial information from the device’s memory.
Severity
5.3 (Medium)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | DS-2CD Series |
Affected:
https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
(link)
|
|
| Hikvision | DS-2DE Series |
Affected:
https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
(link)
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-61392",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-22T12:27:07.318701Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T12:29:21.886Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DS-2CD Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
},
{
"product": "DS-2DE Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Daniel Kaye of Inversus Labs"
}
],
"descriptions": [
{
"lang": "en",
"value": "There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain partial information from the device\u2019s memory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T11:03:11.533Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-cameras/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2026-61392",
"datePublished": "2026-07-22T11:03:11.533Z",
"dateReserved": "2026-07-09T05:51:16.531Z",
"dateUpdated": "2026-07-22T12:29:21.886Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-61391 (GCVE-0-2026-61391)
Vulnerability from nvd – Published: 2026-07-22 11:02 – Updated: 2026-07-22 12:31
VLAI
EPSS
VEX
Summary
There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers to cause device malfunction by sending specially crafted packets.
Severity
7.2 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-121 - Stack-based Buffer Overflow
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | DS-2CD Series |
Affected:
https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
(link)
|
|
| Hikvision | DS-2DE Series |
Affected:
https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
(link)
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-61391",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-22T12:30:41.711706Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "CWE-121 Stack-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T12:31:18.388Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DS-2CD Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
},
{
"product": "DS-2DE Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Daniel Kaye of Inversus Labs"
}
],
"descriptions": [
{
"lang": "en",
"value": "There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers to cause device malfunction by sending specially crafted packets."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T11:02:27.332Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-cameras/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2026-61391",
"datePublished": "2026-07-22T11:02:27.332Z",
"dateReserved": "2026-07-09T05:51:16.531Z",
"dateUpdated": "2026-07-22T12:31:18.388Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-61390 (GCVE-0-2026-61390)
Vulnerability from nvd – Published: 2026-07-22 11:02 – Updated: 2026-07-22 12:34
VLAI
EPSS
VEX
Summary
There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfunction by sending specially crafted packets.
Severity
7.7 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-122 - Heap-based Buffer Overflow
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | DS-2CD Series |
Affected:
https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
(link)
|
|
| Hikvision | DS-2DE Series |
Affected:
https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
(link)
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-61390",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-22T12:32:13.576488Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122 Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T12:34:30.832Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DS-2CD Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
},
{
"product": "DS-2DE Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Daniel Kaye of Inversus Labs"
}
],
"descriptions": [
{
"lang": "en",
"value": "There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfunction by sending specially crafted packets."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T11:02:00.804Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-cameras/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2026-61390",
"datePublished": "2026-07-22T11:02:00.804Z",
"dateReserved": "2026-07-09T05:51:16.530Z",
"dateUpdated": "2026-07-22T12:34:30.832Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-57600 (GCVE-0-2026-57600)
Vulnerability from nvd – Published: 2026-07-22 11:01 – Updated: 2026-07-22 12:35
VLAI
EPSS
VEX
Summary
Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-20 - Improper Input Validation
Assigner
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | DS-2CD Series |
Affected:
https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
(link)
|
|
| Hikvision | DS-2DE Series |
Affected:
https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
(link)
|
|
| Hikvision | DS-2DP Series |
Affected:
https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
(link)
|
|
| Hikvision | DS-2TD Series |
Affected:
https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
(link)
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-57600",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-22T12:34:49.066951Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "CWE-20 Improper Input Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T12:35:10.527Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DS-2CD Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
},
{
"product": "DS-2DE Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
},
{
"product": "DS-2DP Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
},
{
"product": "DS-2TD Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Bitdefender IoT Security Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T11:01:36.269Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-cameras/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2026-57600",
"datePublished": "2026-07-22T11:01:36.269Z",
"dateReserved": "2026-06-25T02:07:05.126Z",
"dateUpdated": "2026-07-22T12:35:10.527Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-57599 (GCVE-0-2026-57599)
Vulnerability from nvd – Published: 2026-07-22 11:00 – Updated: 2026-07-22 12:44
VLAI
EPSS
VEX
Summary
There is a privilege escalation vulnerability in some Hikvision cameras. Due to incorrect permission allocation in the device program, attackers can escalate privileges and gain full control of the device after authenticating via SSH.
Severity
6.6 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-269 - Improper Privilege Management
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | DS-2CD Series |
Affected:
https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
(link)
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-57599",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-22T12:44:40.877849Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-269",
"description": "CWE-269 Improper Privilege Management",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T12:44:49.458Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DS-2CD Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Joffrey Czarny"
}
],
"descriptions": [
{
"lang": "en",
"value": "There is a privilege escalation vulnerability in some Hikvision cameras. Due to incorrect permission allocation in the device program, attackers can escalate privileges and gain full control of the device after authenticating via SSH."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T11:00:49.219Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-cameras/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2026-57599",
"datePublished": "2026-07-22T11:00:49.219Z",
"dateReserved": "2026-06-25T02:07:05.126Z",
"dateUpdated": "2026-07-22T12:44:49.458Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-32684 (GCVE-0-2026-32684)
Vulnerability from nvd – Published: 2026-05-12 10:51 – Updated: 2026-06-02 16:04
VLAI
EPSS
VEX
Summary
The application does not impose strict enough restrictions on directory access permissions, posing a risk that other malicious applications could obtain sensitive information.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-732 - Incorrect Permission Assignment for Critical Resource
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | Hik-Connect APP |
Affected:
V6.10.x
Unaffected: V6.12.0 |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-32684",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-12T12:06:07.612844Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-732",
"description": "CWE-732 Incorrect Permission Assignment for Critical Resource",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-02T16:04:38.256Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Hik-Connect APP",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "V6.10.x"
},
{
"status": "unaffected",
"version": "V6.12.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Yi\u011fithan Y\u00fcceda\u011f"
}
],
"descriptions": [
{
"lang": "en",
"value": "The application does not impose strict enough restrictions on directory access permissions, posing a risk that other malicious applications could obtain sensitive information."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 2.9,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-12T10:51:08.585Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://pinfo.hikvision.com/hkwsen/unzip/20260511114030_14652_doc/GUID-A47A8570-631E-4F62-BCEE-37E9F2983DD7.html"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2026-32684",
"datePublished": "2026-05-12T10:51:08.585Z",
"dateReserved": "2026-03-13T07:45:08.745Z",
"dateUpdated": "2026-06-02T16:04:38.256Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-3828 (GCVE-0-2026-3828)
Vulnerability from nvd – Published: 2026-05-09 08:27 – Updated: 2026-05-11 15:22
VLAI
EPSS
VEX
Summary
Some Hikvision switch products (discontinued since December 2023) are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution.
Severity
7.2 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Assigner
References
1 reference
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | DS-3E1310P-SI |
Affected:
Versions below V1.2.4_210623 (including V1.2.4_210623)
|
|
| Hikvision | DS-3E1318P-SI |
Affected:
Versions below V1.2.0_210823 (including V1.2.0_210823)
|
|
| Hikvision | DS-3E1326P-SI |
Affected:
Versions below V1.2.0_210823 (including V1.2.0_210823)
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-3828",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-11T15:22:31.962279Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-11T15:22:55.314Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DS-3E1310P-SI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V1.2.4_210623 (including V1.2.4_210623)"
}
]
},
{
"product": "DS-3E1318P-SI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V1.2.0_210823 (including V1.2.0_210823)"
}
]
},
{
"product": "DS-3E1326P-SI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V1.2.0_210823 (including V1.2.0_210823)"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Thiago Torres (torresm)"
}
],
"descriptions": [
{
"lang": "en",
"value": "Some Hikvision switch products (discontinued since December 2023) are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-09T08:27:55.964Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/command-execution-vulnerability-in-some-hikvision-switch-product/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2026-3828",
"datePublished": "2026-05-09T08:27:55.964Z",
"dateReserved": "2026-03-09T09:20:38.428Z",
"dateUpdated": "2026-05-11T15:22:55.314Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-1749 (GCVE-0-2026-1749)
Vulnerability from nvd – Published: 2026-05-09 08:27 – Updated: 2026-05-11 15:21
VLAI
EPSS
VEX
Summary
There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated user to obtain the admin permission.
Severity
6.8 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-284 - Improper Access Control
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | HikCentral Professional |
Affected:
V2.4.0~V3.0.1
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-1749",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-11T15:21:36.019611Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "CWE-284 Improper Access Control",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-11T15:21:55.304Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "HikCentral Professional",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "V2.4.0~V3.0.1"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Ayoub ELMOKHTAR from the Offensive Security Team (Noon)"
}
],
"descriptions": [
{
"lang": "en",
"value": "There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated user to obtain the admin permission."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-09T08:27:15.849Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-hikcentral-professional/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2026-1749",
"datePublished": "2026-05-09T08:27:15.849Z",
"dateReserved": "2026-02-02T02:00:26.271Z",
"dateUpdated": "2026-05-11T15:21:55.304Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-0709 (GCVE-0-2026-0709)
Vulnerability from nvd – Published: 2026-01-30 11:01 – Updated: 2026-02-27 14:49
VLAI
EPSS
VEX
Summary
Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution.
Severity
7.2 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Assigner
References
1 reference
Impacted products
6 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | DS-3WAP521-SI |
Affected:
V1.1.6303 build250812 and earlier
|
|
| Hikvision | DS-3WAP522-SI |
Affected:
V1.1.6303 build250812 and earlier
|
|
| Hikvision | DS-3WAP621E-SI |
Affected:
V1.1.6303 build250812 and earlier
|
|
| Hikvision | DS-3WAP622E-SI |
Affected:
V1.1.6303 build250812 and earlier
|
|
| Hikvision | DS-3WAP623E-SI |
Affected:
V1.1.6303 build250812 and earlier
|
|
| Hikvision | DS-3WAP622G-SI |
Affected:
V1.1.6303 build250812 and earlier
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-0709",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-01-30T12:13:24.741883Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-27T14:49:22.572Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DS-3WAP521-SI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "V1.1.6303 build250812 and earlier"
}
]
},
{
"product": "DS-3WAP522-SI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "V1.1.6303 build250812 and earlier"
}
]
},
{
"product": "DS-3WAP621E-SI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "V1.1.6303 build250812 and earlier"
}
]
},
{
"product": "DS-3WAP622E-SI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "V1.1.6303 build250812 and earlier"
}
]
},
{
"product": "DS-3WAP623E-SI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "V1.1.6303 build250812 and earlier"
}
]
},
{
"product": "DS-3WAP622G-SI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "V1.1.6303 build250812 and earlier"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "exzettabyte"
}
],
"descriptions": [
{
"lang": "en",
"value": "Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-01-30T11:01:55.633Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/command-execution-vulnerability-in-some-hikvision-wireless-access-point-products/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2026-0709",
"datePublished": "2026-01-30T11:01:55.633Z",
"dateReserved": "2026-01-08T05:49:12.677Z",
"dateUpdated": "2026-02-27T14:49:22.572Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-66177 (GCVE-0-2025-66177)
Vulnerability from nvd – Published: 2026-01-13 01:47 – Updated: 2026-07-09 06:22
VLAI
EPSS
VEX
Summary
There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-121 - Stack-based Buffer Overflow
Assigner
References
1 reference
Impacted products
99 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | DS-96xxxNI-Hx |
Affected:
Build date before 250807
|
|
| Hikvision | DS-96xxxNI-Ix |
Affected:
Build date before 250807
|
|
| Hikvision | DS-96xxNXI-Sx |
Affected:
Build date before 250807
|
|
| Hikvision | DS-96xxxNXI-Sx |
Affected:
Build date before 250807
|
|
| Hikvision | DS-76xxNXI-Mx/VPro |
Affected:
Build date before 250807
|
|
| Hikvision | DS-96xxNXI-Mx/VPro |
Affected:
Build date before 250807
|
|
| Hikvision | DS-76xxNI-Mx |
Affected:
Build date before 250807
|
|
| Hikvision | DS-77xxNI-Mx |
Affected:
Build date before 250807
|
|
| Hikvision | DS-96xxNXI-Mx |
Affected:
Build date before 250807
|
|
| Hikvision | DS-96xxxNXI-Mx |
Affected:
Build date before 250807
|
|
| Hikvision | DS-86xxxNXI-Mx |
Affected:
Build date before 250807
|
|
| Hikvision | DS-76xxNXI-Ix/S |
Affected:
Build date before 250807
|
|
| Hikvision | DS-77xxNXI-Ix/S |
Affected:
Build date before 250807
|
|
| Hikvision | DS-86xxNXI-Ix/S |
Affected:
Build date before 250807
|
|
| Hikvision | DS-96xxNXI-Ix/S |
Affected:
Build date before 250807
|
|
| Hikvision | DS-76xxNXI-Ix/VPro |
Affected:
Build date before 250807
|
|
| Hikvision | DS-77xxNXI-Ix/VPro |
Affected:
Build date before 250807
|
|
| Hikvision | DS-76xxNXI-Kx(/xP) including(D)、(E)、(B) |
Affected:
Build date before 250807
|
|
| Hikvision | DS-77xxNXI-Kx(/xP) including(D)、(E)、(B) |
Affected:
Build date before 250807
|
|
| Hikvision | DS-76xxNXI-Kx(/xP)/Vpro |
Affected:
Build date before 250807
|
|
| Hikvision | DS-77xxNXI-Kx(/xP)/Vpro |
Affected:
Build date before 250807
|
|
| Hikvision | DS-76xxNI-Qx(/xP) including(D)、(E) |
Affected:
Build date before 250807
|
|
| Hikvision | DS-71xxNI-Q1(/xP)/M |
Affected:
Build date before 250807
|
|
| Hikvision | DS-71xxNI-Q1(/xP) |
Affected:
Build date before 250807
|
|
| Hikvision | DS-710xNI-G1/(xP)/M |
Affected:
Build date before 250807
|
|
| Hikvision | DS-76xxNI-Q1(/xP) |
Affected:
Build date before 250807
|
|
| Hikvision | DS-76xxNI-Q2(/xP) |
Affected:
Build date before 250807
|
|
| Hikvision | DS-76xxNXI-K1(/xP) |
Affected:
Build date before 250807
|
|
| Hikvision | DS-76xxNXI-K2(/xP) |
Affected:
Build date before 250807
|
|
| Hikvision | DS-77xxNXI-K4(/xP) |
Affected:
Build date before 250807
|
|
| Hikvision | DS-86xxNXI-K8(/xP) |
Affected:
Build date before 250807
|
|
| Hikvision | DS-76xxNXI-K1(/xP)/VPro |
Affected:
Build date before 250807
|
|
| Hikvision | DS-76xxNXI-K2(/xP)/VPro |
Affected:
Build date before 250807
|
|
| Hikvision | DS-77xxNXI-K4(/xP)/VPro |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-71xxHGHI-M1(/T) |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-72xxHGHI-M1(/T) |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-71xxHQHI-M1(/T) |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-72xxHQHI-M1(/T) |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-72xxHQHI-Mx/XT |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-72xxHUHI-Mx/XT |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-72xxHTHI-Mx/XT |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-90xxHUHI-M8/S(S) |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-73xxHUHI-M4/S(S) |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-81xxHUHI-M8/S(S) |
Affected:
Build date before 250807
|
|
| Hikvision | DS-71xxHGHI-M1(/T) |
Affected:
Build date before 250807
|
|
| Hikvision | DS-72xxHGHI-M1(/T) |
Affected:
Build date before 250807
|
|
| Hikvision | DS-ExxHGHI-xx |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-71xxHQHI-M1/S |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-72xxHQHI-M1/E |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-71xxHQHI-M1/T |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-72xxHQHI-M1/T |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-73xxHQHI-M4/S |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-81xxHQHI-M8/S |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-90xxHQHI-M8/S |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-ExxHQHI-xx |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-71xxHUHI-M1/S |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-72xxHUHI-M1/E |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-72xxHUHI-M1/T |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-72xxHUHI-Mx/X |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-72xxHUHI-Mx/PXT |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-73xxHUHI-M4/S |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-90xxHUHI-M8/S |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-ExxHUHI-xx |
Affected:
Build date before 250807
|
|
| Hikvision | DS-A806xxSI |
Affected:
Build date before 250807
|
|
| Hikvision | DS-AT1000SI |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-96xxxNXI-Hx |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-96064NXI-I16 |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-96xxxNXI-Ix/AI |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-67xxNXI-Mx/X |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-76xxNXI-Mx/X |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-77xxNXI-Mx/X |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-96xxNXI-Mx/X |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-96xxxNXI-Mx/X |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-96xxxNXI-Hx/AI |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-96xxNXI-Mx/AI |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-67xxNXI-Mx/AI |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-67xxxNXI-Mx/AI |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-67xxNXI-S/T |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-67xxNXI-S |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-6704NXI/AI |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-67xxNXI-P1 |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-7608NXI-P2 |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-77xxNXI-P4 |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-96xxNXI-Px |
Affected:
Build date before 250807
|
|
| Hikvision | DS-2CD1xxxG2 |
Affected:
Versions below V5.7.13_230822 (including V5.7.13_230822)
|
|
| Hikvision | DS-2CD3xx1G2 |
Affected:
Versions below V5.7.13_230822 (including V5.7.13_230822)
|
|
| Hikvision | HWI-xxxxHA |
Affected:
Versions below V5.7.13_230822 (including V5.7.13_230822)
|
|
| Hikvision | IPC-xxxxHA |
Affected:
Versions below V5.7.13_230822 (including V5.7.13_230822)
|
|
| Hikvision | DS-2CD2Dx5G1 |
Affected:
Versions below V5.7.210_240826 (including V5.7.210_240826)
|
|
| Hikvision | DS-2CD64x5G1 |
Affected:
Versions below V5.7.210_240826 (including V5.7.210_240826)
|
|
| Hikvision | DS-2CD29xxG0 |
Affected:
Versions below V5.7.21_240814 (including V5.7.21_240814)
|
|
| Hikvision | DS-2XE6xxxG0 |
Affected:
Versions below V5.7.7build241203 (including V5.7.7build241203)
|
|
| Hikvision | DS-2XC6xxxG0 |
Affected:
Versions below V5.7.7build241203 (including V5.7.7build241203)
|
|
| Hikvision | DS-2CD1xxxG0(T) |
Affected:
Versions below V5.7.23_241015 (including V5.7.23_241015)
|
|
| Hikvision | DS-2CD1xx1 |
Affected:
Versions below V5.7.23_241015 (including V5.7.23_241015)
|
|
| Hikvision | DS-2CD3xx1G0 |
Affected:
Versions below V5.7.23_241015 (including V5.7.23_241015)
|
|
| Hikvision | DS-2CD2xx1G0 |
Affected:
Versions below V5.7.23_241015 (including V5.7.23_241015)
|
|
| Hikvision | IPC-xxxxH |
Affected:
Versions below V5.7.23_241015 (including V5.7.23_241015)
|
|
| Hikvision | HWI-xxxH(C) |
Affected:
Versions below V5.7.23_241015 (including V5.7.23_241015)
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-66177",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-01-13T14:26:06.385030Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "CWE-121 Stack-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-01-13T17:27:13.199Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DS-96xxxNI-Hx",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-96xxxNI-Ix",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-96xxNXI-Sx",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-96xxxNXI-Sx",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-76xxNXI-Mx/VPro",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-96xxNXI-Mx/VPro",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-76xxNI-Mx",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-77xxNI-Mx",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-96xxNXI-Mx",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-96xxxNXI-Mx",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-86xxxNXI-Mx",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-76xxNXI-Ix/S",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-77xxNXI-Ix/S",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-86xxNXI-Ix/S",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-96xxNXI-Ix/S",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-76xxNXI-Ix/VPro",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-77xxNXI-Ix/VPro",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-76xxNXI-Kx(/xP) including(D)\u3001(E)\u3001(B)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-77xxNXI-Kx(/xP) including(D)\u3001(E)\u3001(B)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-76xxNXI-Kx(/xP)/Vpro",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-77xxNXI-Kx(/xP)/Vpro",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-76xxNI-Qx(/xP) including(D)\u3001(E)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-71xxNI-Q1(/xP)/M",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-71xxNI-Q1(/xP)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-710xNI-G1/(xP)/M",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-71xxNI-Q1(/xP)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-71xxNI-Q1(/xP)/M",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-76xxNI-Q1(/xP)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-76xxNI-Q2(/xP)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-76xxNXI-K1(/xP)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-76xxNXI-K2(/xP)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-77xxNXI-K4(/xP)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-86xxNXI-K8(/xP)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-76xxNXI-K1(/xP)/VPro",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-76xxNXI-K2(/xP)/VPro",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-77xxNXI-K4(/xP)/VPro",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-71xxHGHI-M1(/T)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-72xxHGHI-M1(/T)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-71xxHQHI-M1(/T)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-72xxHQHI-M1(/T)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-72xxHQHI-Mx/XT",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-72xxHUHI-Mx/XT",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-72xxHTHI-Mx/XT",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-90xxHUHI-M8/S(S)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-73xxHUHI-M4/S(S)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-81xxHUHI-M8/S(S)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-71xxHGHI-M1(/T)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-72xxHGHI-M1(/T)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-ExxHGHI-xx",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-71xxHQHI-M1/S",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-72xxHQHI-M1/E",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-71xxHQHI-M1/T",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-72xxHQHI-M1/T",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-72xxHQHI-Mx/XT",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-73xxHQHI-M4/S",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-81xxHQHI-M8/S",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-90xxHQHI-M8/S",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-ExxHQHI-xx",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-71xxHUHI-M1/S",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-72xxHUHI-M1/E",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-72xxHUHI-M1/T",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-72xxHUHI-Mx/X",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-72xxHUHI-Mx/XT",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-72xxHUHI-Mx/PXT",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-73xxHUHI-M4/S",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-90xxHUHI-M8/S",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-ExxHUHI-xx",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-72xxHTHI-Mx/XT",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-A806xxSI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-AT1000SI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-96xxxNXI-Hx",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-96064NXI-I16",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-96xxxNXI-Ix/AI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-67xxNXI-Mx/X",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-76xxNXI-Mx/X",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-77xxNXI-Mx/X",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-96xxNXI-Mx/X",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-96xxxNXI-Mx/X",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-96xxxNXI-Hx/AI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-96xxNXI-Mx/AI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-67xxNXI-Mx/AI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-67xxxNXI-Mx/AI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-67xxNXI-S/T",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-67xxNXI-S",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-6704NXI/AI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-67xxNXI-P1",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-7608NXI-P2",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-77xxNXI-P4",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-96xxNXI-Px",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-2CD1xxxG2",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.13_230822 (including V5.7.13_230822)"
}
]
},
{
"product": "DS-2CD3xx1G2",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.13_230822 (including V5.7.13_230822)"
}
]
},
{
"product": "HWI-xxxxHA",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.13_230822 (including V5.7.13_230822)"
}
]
},
{
"product": "IPC-xxxxHA",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.13_230822 (including V5.7.13_230822)"
}
]
},
{
"product": "DS-2CD2Dx5G1",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.210_240826 (including V5.7.210_240826)"
}
]
},
{
"product": "DS-2CD64x5G1",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.210_240826 (including V5.7.210_240826)"
}
]
},
{
"product": "DS-2CD29xxG0",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.21_240814 (including V5.7.21_240814)"
}
]
},
{
"product": "DS-2XE6xxxG0",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.7build241203 (including V5.7.7build241203)"
}
]
},
{
"product": "DS-2XC6xxxG0",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.7build241203 (including V5.7.7build241203)"
}
]
},
{
"product": "DS-2CD1xxxG0(T)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.23_241015 (including V5.7.23_241015)"
}
]
},
{
"product": "DS-2CD1xx1",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.23_241015 (including V5.7.23_241015)"
}
]
},
{
"product": "DS-2CD3xx1G0",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.23_241015 (including V5.7.23_241015)"
}
]
},
{
"product": "DS-2CD2xx1G0",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.23_241015 (including V5.7.23_241015)"
}
]
},
{
"product": "IPC-xxxxH",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.23_241015 (including V5.7.23_241015)"
}
]
},
{
"product": "HWI-xxxH(C)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.23_241015 (including V5.7.23_241015)"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Angel Lozano Alcazar"
},
{
"lang": "en",
"type": "finder",
"value": "Pedro Guillen Nu\u00f1ez"
}
],
"descriptions": [
{
"lang": "en",
"value": "There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-09T06:22:08.882Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/buffer-overflow-vulnerabilities-in-some-hikvision-products/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2025-66177",
"datePublished": "2026-01-13T01:47:54.031Z",
"dateReserved": "2025-11-24T08:59:35.903Z",
"dateUpdated": "2026-07-09T06:22:08.882Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-66174 (GCVE-0-2025-66174)
Vulnerability from nvd – Published: 2025-12-19 06:39 – Updated: 2025-12-19 15:41
VLAI
EPSS
VEX
Summary
There is an improper authentication vulnerability in some Hikvision DVR products. Due to the improper implementation of authentication for the serial port, an attacker with physical access could exploit this vulnerability by connecting to the affected products and run a series of commands.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-287 - Improper Authentication
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | DS-7104HGHI-F1 |
Affected:
Versions below V4.30.122_201107 (including V4.30.122_201107)
|
|
| Hikvision | DS-7204HGHI-F1 |
Affected:
Versions below V4.30.122_201107 (including V4.30.122_201107)
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-66174",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-12-19T15:41:12.037984Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "CWE-287 Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-12-19T15:41:32.976Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DS-7104HGHI-F1",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V4.30.122_201107 (including V4.30.122_201107)"
}
]
},
{
"product": "DS-7204HGHI-F1",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V4.30.122_201107 (including V4.30.122_201107)"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Aaron J Jose"
}
],
"descriptions": [
{
"lang": "en",
"value": "There is an improper authentication vulnerability in some Hikvision DVR products. Due to the improper implementation of authentication for the serial port, an attacker with physical access could exploit this vulnerability by connecting to the affected products and run a series of commands."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-12-19T06:45:55.453Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/serial-port-privilege-escalation-vulnerabilities-in-some-hikvision-nvr-devices/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2025-66174",
"datePublished": "2025-12-19T06:39:51.404Z",
"dateReserved": "2025-11-24T08:59:35.903Z",
"dateUpdated": "2025-12-19T15:41:32.976Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-66173 (GCVE-0-2025-66173)
Vulnerability from nvd – Published: 2025-12-19 06:39 – Updated: 2025-12-19 15:40
VLAI
EPSS
VEX
Summary
There is a privilege escalation vulnerability in some Hikvision DVR products. Due to the improper implementation of authentication for the serial port, an attacker with physical access could exploit this vulnerability by connecting to the affected products and gaining access to an unrestricted shell environment.
Severity
6.2 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-269 - Improper Privilege Management
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | DS-7104HGHI-F1 |
Affected:
Versions below V4.30.122_201107 (including V4.30.122_201107)
|
|
| Hikvision | DS-7204HGHI-F1 |
Affected:
Versions below V4.30.122_201107 (including V4.30.122_201107)
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-66173",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-12-19T15:40:25.549400Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-269",
"description": "CWE-269 Improper Privilege Management",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-12-19T15:40:52.217Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DS-7104HGHI-F1",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V4.30.122_201107 (including V4.30.122_201107)"
}
]
},
{
"product": "DS-7204HGHI-F1",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V4.30.122_201107 (including V4.30.122_201107)"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Aaron J Jose"
}
],
"descriptions": [
{
"lang": "en",
"value": "There is a privilege escalation vulnerability in some Hikvision DVR products. Due to the improper implementation of authentication for the serial port, an attacker with physical access could exploit this vulnerability by connecting to the affected products and gaining access to an unrestricted shell environment."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "PHYSICAL",
"availabilityImpact": "HIGH",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-12-19T06:45:40.814Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/serial-port-privilege-escalation-vulnerabilities-in-some-hikvision-nvr-devices/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2025-66173",
"datePublished": "2025-12-19T06:39:38.504Z",
"dateReserved": "2025-11-24T08:59:35.902Z",
"dateUpdated": "2025-12-19T15:40:52.217Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2024-58274 (GCVE-0-2024-58274)
Vulnerability from nvd – Published: 2025-10-22 00:00 – Updated: 2025-10-22 13:55Summary
Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2024-08-01 allows execution of a command within $( ) in /center/api/installation/detection JSON data, as exploited in the wild in 2024 and 2025.
Severity
8.3 (High)
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | CSMP iSecure Center |
Affected:
0 , ≤ 2024-08-01
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-58274",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-10-22T13:55:11.718588Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-10-22T13:55:16.083Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://xz.aliyun.com/news/14639"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "CSMP iSecure Center",
"vendor": "Hikvision",
"versions": [
{
"lessThanOrEqual": "2024-08-01",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2024-08-01 allows execution of a command within $( ) in /center/api/installation/detection JSON data, as exploited in the wild in 2024 and 2025."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-10-22T03:45:04.855Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://github.com/ahisec/nuclei-tps/blob/main/http/vulnerabilities/hikvision/hikvision-csmp-installation-rce.yaml"
},
{
"url": "https://forum.butian.net/article/498"
},
{
"url": "https://xz.aliyun.com/news/14639"
}
],
"x_generator": {
"engine": "enrichogram 0.0.1"
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2024-58274",
"datePublished": "2025-10-22T00:00:00.000Z",
"dateReserved": "2025-10-22T00:00:00.000Z",
"dateUpdated": "2025-10-22T13:55:16.083Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-53691 (GCVE-0-2023-53691)
Vulnerability from nvd – Published: 2025-10-22 00:00 – Updated: 2025-10-22 13:56Summary
Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2023-06-25 allows file upload via /center/api/files directory traversal, as exploited in the wild in 2024 and 2025.
Severity
8.3 (High)
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-24 - Path Traversal: '../filedir'
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | CSMP iSecure Center |
Affected:
0 , ≤ 2023-06-25
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-53691",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-10-22T13:56:40.313239Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-10-22T13:56:44.179Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://zhuanlan.zhihu.com/p/639514473"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "CSMP iSecure Center",
"vendor": "Hikvision",
"versions": [
{
"lessThanOrEqual": "2023-06-25",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2023-06-25 allows file upload via /center/api/files directory traversal, as exploited in the wild in 2024 and 2025."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-24",
"description": "CWE-24 Path Traversal: \u0027../filedir\u0027",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-10-22T03:42:57.265Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://zhuanlan.zhihu.com/p/639514473"
}
],
"x_generator": {
"engine": "enrichogram 0.0.1"
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2023-53691",
"datePublished": "2025-10-22T00:00:00.000Z",
"dateReserved": "2025-10-22T00:00:00.000Z",
"dateUpdated": "2025-10-22T13:56:44.179Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-28815 (GCVE-0-2023-28815)
Vulnerability from nvd – Published: 2025-10-17 11:07 – Updated: 2025-10-17 12:10
VLAI
EPSS
VEX
Summary
Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation, resulting in a command injection vulnerability. Attackers may exploit this to gain platform privileges and execute arbitrary commands on the system.iSecure Center is software released for China's domestic market only, with no overseas release.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-141 - Improper Neutralization of Parameter/Argument Delimiters
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | iSecure Center |
Affected:
V1.0.0 - V1.7.0
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-28815",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-10-17T12:10:12.884691Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-141",
"description": "CWE-141 Improper Neutralization of Parameter/Argument Delimiters",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-10-17T12:10:16.930Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iSecure Center",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "V1.0.0 - V1.7.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "hsrc"
}
],
"descriptions": [
{
"lang": "en",
"value": "Some versions of Hikvision\u0027s iSecure Center Product contain insufficient parameter validation, resulting in a command injection vulnerability. Attackers may exploit this to gain platform privileges and execute arbitrary commands on the system.iSecure Center is software released for China\u0027s domestic market only, with no overseas release."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-10-17T11:07:26.306Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/cn/support/CybersecurityCenter/SecurityNotices/2023-04/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2023-28815",
"datePublished": "2025-10-17T11:07:26.306Z",
"dateReserved": "2023-03-23T19:49:08.441Z",
"dateUpdated": "2025-10-17T12:10:16.930Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-28814 (GCVE-0-2023-28814)
Vulnerability from nvd – Published: 2025-10-17 11:07 – Updated: 2025-10-17 13:04
VLAI
EPSS
VEX
Summary
Some versions of Hikvision's iSecure Center Product have an improper file upload control vulnerability. Due to the improper verification of file to be uploaded, attackers may upload malicious files to the server. iSecure Center is software released for China's domestic market only, with no overseas release.
Severity
9.8 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-434 - Unrestricted Upload of File with Dangerous Type
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | iSecure Center |
Affected:
V1.0.0 - V1.7.0
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-28814",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-10-17T13:04:13.622732Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-434",
"description": "CWE-434 Unrestricted Upload of File with Dangerous Type",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-10-17T13:04:24.853Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "iSecure Center",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "V1.0.0 - V1.7.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "hsrc"
}
],
"descriptions": [
{
"lang": "en",
"value": "Some versions of Hikvision\u0027s iSecure Center Product have an improper file upload control vulnerability. Due to the improper verification of file to be uploaded, attackers may upload malicious files to the server. iSecure Center is software released for China\u0027s domestic market only, with no overseas release."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-10-17T11:07:06.801Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/cn/support/CybersecurityCenter/SecurityNotices/2023-03/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2023-28814",
"datePublished": "2025-10-17T11:07:06.801Z",
"dateReserved": "2023-03-23T19:49:08.440Z",
"dateUpdated": "2025-10-17T13:04:24.853Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2026-61392 (GCVE-0-2026-61392)
Vulnerability from cvelistv5 – Published: 2026-07-22 11:03 – Updated: 2026-07-22 12:29
VLAI
EPSS
VEX
Summary
There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain partial information from the device’s memory.
Severity
5.3 (Medium)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | DS-2CD Series |
Affected:
https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
(link)
|
|
| Hikvision | DS-2DE Series |
Affected:
https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
(link)
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-61392",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-22T12:27:07.318701Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T12:29:21.886Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DS-2CD Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
},
{
"product": "DS-2DE Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Daniel Kaye of Inversus Labs"
}
],
"descriptions": [
{
"lang": "en",
"value": "There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain partial information from the device\u2019s memory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T11:03:11.533Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-cameras/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2026-61392",
"datePublished": "2026-07-22T11:03:11.533Z",
"dateReserved": "2026-07-09T05:51:16.531Z",
"dateUpdated": "2026-07-22T12:29:21.886Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-61391 (GCVE-0-2026-61391)
Vulnerability from cvelistv5 – Published: 2026-07-22 11:02 – Updated: 2026-07-22 12:31
VLAI
EPSS
VEX
Summary
There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers to cause device malfunction by sending specially crafted packets.
Severity
7.2 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-121 - Stack-based Buffer Overflow
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | DS-2CD Series |
Affected:
https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
(link)
|
|
| Hikvision | DS-2DE Series |
Affected:
https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
(link)
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-61391",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-22T12:30:41.711706Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "CWE-121 Stack-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T12:31:18.388Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DS-2CD Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
},
{
"product": "DS-2DE Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Daniel Kaye of Inversus Labs"
}
],
"descriptions": [
{
"lang": "en",
"value": "There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers to cause device malfunction by sending specially crafted packets."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T11:02:27.332Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-cameras/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2026-61391",
"datePublished": "2026-07-22T11:02:27.332Z",
"dateReserved": "2026-07-09T05:51:16.531Z",
"dateUpdated": "2026-07-22T12:31:18.388Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-61390 (GCVE-0-2026-61390)
Vulnerability from cvelistv5 – Published: 2026-07-22 11:02 – Updated: 2026-07-22 12:34
VLAI
EPSS
VEX
Summary
There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfunction by sending specially crafted packets.
Severity
7.7 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-122 - Heap-based Buffer Overflow
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | DS-2CD Series |
Affected:
https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
(link)
|
|
| Hikvision | DS-2DE Series |
Affected:
https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
(link)
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-61390",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-22T12:32:13.576488Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122 Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T12:34:30.832Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DS-2CD Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
},
{
"product": "DS-2DE Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Daniel Kaye of Inversus Labs"
}
],
"descriptions": [
{
"lang": "en",
"value": "There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfunction by sending specially crafted packets."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T11:02:00.804Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-cameras/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2026-61390",
"datePublished": "2026-07-22T11:02:00.804Z",
"dateReserved": "2026-07-09T05:51:16.530Z",
"dateUpdated": "2026-07-22T12:34:30.832Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-57600 (GCVE-0-2026-57600)
Vulnerability from cvelistv5 – Published: 2026-07-22 11:01 – Updated: 2026-07-22 12:35
VLAI
EPSS
VEX
Summary
Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-20 - Improper Input Validation
Assigner
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | DS-2CD Series |
Affected:
https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
(link)
|
|
| Hikvision | DS-2DE Series |
Affected:
https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
(link)
|
|
| Hikvision | DS-2DP Series |
Affected:
https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
(link)
|
|
| Hikvision | DS-2TD Series |
Affected:
https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
(link)
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-57600",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-22T12:34:49.066951Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "CWE-20 Improper Input Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T12:35:10.527Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DS-2CD Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
},
{
"product": "DS-2DE Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
},
{
"product": "DS-2DP Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
},
{
"product": "DS-2TD Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Bitdefender IoT Security Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T11:01:36.269Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-cameras/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2026-57600",
"datePublished": "2026-07-22T11:01:36.269Z",
"dateReserved": "2026-06-25T02:07:05.126Z",
"dateUpdated": "2026-07-22T12:35:10.527Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-57599 (GCVE-0-2026-57599)
Vulnerability from cvelistv5 – Published: 2026-07-22 11:00 – Updated: 2026-07-22 12:44
VLAI
EPSS
VEX
Summary
There is a privilege escalation vulnerability in some Hikvision cameras. Due to incorrect permission allocation in the device program, attackers can escalate privileges and gain full control of the device after authenticating via SSH.
Severity
6.6 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-269 - Improper Privilege Management
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | DS-2CD Series |
Affected:
https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
(link)
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-57599",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-22T12:44:40.877849Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-269",
"description": "CWE-269 Improper Privilege Management",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T12:44:49.458Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DS-2CD Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Joffrey Czarny"
}
],
"descriptions": [
{
"lang": "en",
"value": "There is a privilege escalation vulnerability in some Hikvision cameras. Due to incorrect permission allocation in the device program, attackers can escalate privileges and gain full control of the device after authenticating via SSH."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T11:00:49.219Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-cameras/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2026-57599",
"datePublished": "2026-07-22T11:00:49.219Z",
"dateReserved": "2026-06-25T02:07:05.126Z",
"dateUpdated": "2026-07-22T12:44:49.458Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-32684 (GCVE-0-2026-32684)
Vulnerability from cvelistv5 – Published: 2026-05-12 10:51 – Updated: 2026-06-02 16:04
VLAI
EPSS
VEX
Summary
The application does not impose strict enough restrictions on directory access permissions, posing a risk that other malicious applications could obtain sensitive information.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-732 - Incorrect Permission Assignment for Critical Resource
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | Hik-Connect APP |
Affected:
V6.10.x
Unaffected: V6.12.0 |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-32684",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-12T12:06:07.612844Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-732",
"description": "CWE-732 Incorrect Permission Assignment for Critical Resource",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-02T16:04:38.256Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Hik-Connect APP",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "V6.10.x"
},
{
"status": "unaffected",
"version": "V6.12.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Yi\u011fithan Y\u00fcceda\u011f"
}
],
"descriptions": [
{
"lang": "en",
"value": "The application does not impose strict enough restrictions on directory access permissions, posing a risk that other malicious applications could obtain sensitive information."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 2.9,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-12T10:51:08.585Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://pinfo.hikvision.com/hkwsen/unzip/20260511114030_14652_doc/GUID-A47A8570-631E-4F62-BCEE-37E9F2983DD7.html"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2026-32684",
"datePublished": "2026-05-12T10:51:08.585Z",
"dateReserved": "2026-03-13T07:45:08.745Z",
"dateUpdated": "2026-06-02T16:04:38.256Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-3828 (GCVE-0-2026-3828)
Vulnerability from cvelistv5 – Published: 2026-05-09 08:27 – Updated: 2026-05-11 15:22
VLAI
EPSS
VEX
Summary
Some Hikvision switch products (discontinued since December 2023) are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution.
Severity
7.2 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Assigner
References
1 reference
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | DS-3E1310P-SI |
Affected:
Versions below V1.2.4_210623 (including V1.2.4_210623)
|
|
| Hikvision | DS-3E1318P-SI |
Affected:
Versions below V1.2.0_210823 (including V1.2.0_210823)
|
|
| Hikvision | DS-3E1326P-SI |
Affected:
Versions below V1.2.0_210823 (including V1.2.0_210823)
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-3828",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-11T15:22:31.962279Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-11T15:22:55.314Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DS-3E1310P-SI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V1.2.4_210623 (including V1.2.4_210623)"
}
]
},
{
"product": "DS-3E1318P-SI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V1.2.0_210823 (including V1.2.0_210823)"
}
]
},
{
"product": "DS-3E1326P-SI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V1.2.0_210823 (including V1.2.0_210823)"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Thiago Torres (torresm)"
}
],
"descriptions": [
{
"lang": "en",
"value": "Some Hikvision switch products (discontinued since December 2023) are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-09T08:27:55.964Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/command-execution-vulnerability-in-some-hikvision-switch-product/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2026-3828",
"datePublished": "2026-05-09T08:27:55.964Z",
"dateReserved": "2026-03-09T09:20:38.428Z",
"dateUpdated": "2026-05-11T15:22:55.314Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-1749 (GCVE-0-2026-1749)
Vulnerability from cvelistv5 – Published: 2026-05-09 08:27 – Updated: 2026-05-11 15:21
VLAI
EPSS
VEX
Summary
There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated user to obtain the admin permission.
Severity
6.8 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-284 - Improper Access Control
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | HikCentral Professional |
Affected:
V2.4.0~V3.0.1
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-1749",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-11T15:21:36.019611Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "CWE-284 Improper Access Control",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-11T15:21:55.304Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "HikCentral Professional",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "V2.4.0~V3.0.1"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Ayoub ELMOKHTAR from the Offensive Security Team (Noon)"
}
],
"descriptions": [
{
"lang": "en",
"value": "There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated user to obtain the admin permission."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-09T08:27:15.849Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-hikcentral-professional/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2026-1749",
"datePublished": "2026-05-09T08:27:15.849Z",
"dateReserved": "2026-02-02T02:00:26.271Z",
"dateUpdated": "2026-05-11T15:21:55.304Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-0709 (GCVE-0-2026-0709)
Vulnerability from cvelistv5 – Published: 2026-01-30 11:01 – Updated: 2026-02-27 14:49
VLAI
EPSS
VEX
Summary
Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution.
Severity
7.2 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Assigner
References
1 reference
Impacted products
6 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | DS-3WAP521-SI |
Affected:
V1.1.6303 build250812 and earlier
|
|
| Hikvision | DS-3WAP522-SI |
Affected:
V1.1.6303 build250812 and earlier
|
|
| Hikvision | DS-3WAP621E-SI |
Affected:
V1.1.6303 build250812 and earlier
|
|
| Hikvision | DS-3WAP622E-SI |
Affected:
V1.1.6303 build250812 and earlier
|
|
| Hikvision | DS-3WAP623E-SI |
Affected:
V1.1.6303 build250812 and earlier
|
|
| Hikvision | DS-3WAP622G-SI |
Affected:
V1.1.6303 build250812 and earlier
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-0709",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-01-30T12:13:24.741883Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-02-27T14:49:22.572Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DS-3WAP521-SI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "V1.1.6303 build250812 and earlier"
}
]
},
{
"product": "DS-3WAP522-SI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "V1.1.6303 build250812 and earlier"
}
]
},
{
"product": "DS-3WAP621E-SI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "V1.1.6303 build250812 and earlier"
}
]
},
{
"product": "DS-3WAP622E-SI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "V1.1.6303 build250812 and earlier"
}
]
},
{
"product": "DS-3WAP623E-SI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "V1.1.6303 build250812 and earlier"
}
]
},
{
"product": "DS-3WAP622G-SI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "V1.1.6303 build250812 and earlier"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "exzettabyte"
}
],
"descriptions": [
{
"lang": "en",
"value": "Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-01-30T11:01:55.633Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/command-execution-vulnerability-in-some-hikvision-wireless-access-point-products/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2026-0709",
"datePublished": "2026-01-30T11:01:55.633Z",
"dateReserved": "2026-01-08T05:49:12.677Z",
"dateUpdated": "2026-02-27T14:49:22.572Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-66177 (GCVE-0-2025-66177)
Vulnerability from cvelistv5 – Published: 2026-01-13 01:47 – Updated: 2026-07-09 06:22
VLAI
EPSS
VEX
Summary
There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.
Severity
8.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-121 - Stack-based Buffer Overflow
Assigner
References
1 reference
Impacted products
99 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | DS-96xxxNI-Hx |
Affected:
Build date before 250807
|
|
| Hikvision | DS-96xxxNI-Ix |
Affected:
Build date before 250807
|
|
| Hikvision | DS-96xxNXI-Sx |
Affected:
Build date before 250807
|
|
| Hikvision | DS-96xxxNXI-Sx |
Affected:
Build date before 250807
|
|
| Hikvision | DS-76xxNXI-Mx/VPro |
Affected:
Build date before 250807
|
|
| Hikvision | DS-96xxNXI-Mx/VPro |
Affected:
Build date before 250807
|
|
| Hikvision | DS-76xxNI-Mx |
Affected:
Build date before 250807
|
|
| Hikvision | DS-77xxNI-Mx |
Affected:
Build date before 250807
|
|
| Hikvision | DS-96xxNXI-Mx |
Affected:
Build date before 250807
|
|
| Hikvision | DS-96xxxNXI-Mx |
Affected:
Build date before 250807
|
|
| Hikvision | DS-86xxxNXI-Mx |
Affected:
Build date before 250807
|
|
| Hikvision | DS-76xxNXI-Ix/S |
Affected:
Build date before 250807
|
|
| Hikvision | DS-77xxNXI-Ix/S |
Affected:
Build date before 250807
|
|
| Hikvision | DS-86xxNXI-Ix/S |
Affected:
Build date before 250807
|
|
| Hikvision | DS-96xxNXI-Ix/S |
Affected:
Build date before 250807
|
|
| Hikvision | DS-76xxNXI-Ix/VPro |
Affected:
Build date before 250807
|
|
| Hikvision | DS-77xxNXI-Ix/VPro |
Affected:
Build date before 250807
|
|
| Hikvision | DS-76xxNXI-Kx(/xP) including(D)、(E)、(B) |
Affected:
Build date before 250807
|
|
| Hikvision | DS-77xxNXI-Kx(/xP) including(D)、(E)、(B) |
Affected:
Build date before 250807
|
|
| Hikvision | DS-76xxNXI-Kx(/xP)/Vpro |
Affected:
Build date before 250807
|
|
| Hikvision | DS-77xxNXI-Kx(/xP)/Vpro |
Affected:
Build date before 250807
|
|
| Hikvision | DS-76xxNI-Qx(/xP) including(D)、(E) |
Affected:
Build date before 250807
|
|
| Hikvision | DS-71xxNI-Q1(/xP)/M |
Affected:
Build date before 250807
|
|
| Hikvision | DS-71xxNI-Q1(/xP) |
Affected:
Build date before 250807
|
|
| Hikvision | DS-710xNI-G1/(xP)/M |
Affected:
Build date before 250807
|
|
| Hikvision | DS-76xxNI-Q1(/xP) |
Affected:
Build date before 250807
|
|
| Hikvision | DS-76xxNI-Q2(/xP) |
Affected:
Build date before 250807
|
|
| Hikvision | DS-76xxNXI-K1(/xP) |
Affected:
Build date before 250807
|
|
| Hikvision | DS-76xxNXI-K2(/xP) |
Affected:
Build date before 250807
|
|
| Hikvision | DS-77xxNXI-K4(/xP) |
Affected:
Build date before 250807
|
|
| Hikvision | DS-86xxNXI-K8(/xP) |
Affected:
Build date before 250807
|
|
| Hikvision | DS-76xxNXI-K1(/xP)/VPro |
Affected:
Build date before 250807
|
|
| Hikvision | DS-76xxNXI-K2(/xP)/VPro |
Affected:
Build date before 250807
|
|
| Hikvision | DS-77xxNXI-K4(/xP)/VPro |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-71xxHGHI-M1(/T) |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-72xxHGHI-M1(/T) |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-71xxHQHI-M1(/T) |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-72xxHQHI-M1(/T) |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-72xxHQHI-Mx/XT |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-72xxHUHI-Mx/XT |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-72xxHTHI-Mx/XT |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-90xxHUHI-M8/S(S) |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-73xxHUHI-M4/S(S) |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-81xxHUHI-M8/S(S) |
Affected:
Build date before 250807
|
|
| Hikvision | DS-71xxHGHI-M1(/T) |
Affected:
Build date before 250807
|
|
| Hikvision | DS-72xxHGHI-M1(/T) |
Affected:
Build date before 250807
|
|
| Hikvision | DS-ExxHGHI-xx |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-71xxHQHI-M1/S |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-72xxHQHI-M1/E |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-71xxHQHI-M1/T |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-72xxHQHI-M1/T |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-73xxHQHI-M4/S |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-81xxHQHI-M8/S |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-90xxHQHI-M8/S |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-ExxHQHI-xx |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-71xxHUHI-M1/S |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-72xxHUHI-M1/E |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-72xxHUHI-M1/T |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-72xxHUHI-Mx/X |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-72xxHUHI-Mx/PXT |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-73xxHUHI-M4/S |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-90xxHUHI-M8/S |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-ExxHUHI-xx |
Affected:
Build date before 250807
|
|
| Hikvision | DS-A806xxSI |
Affected:
Build date before 250807
|
|
| Hikvision | DS-AT1000SI |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-96xxxNXI-Hx |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-96064NXI-I16 |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-96xxxNXI-Ix/AI |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-67xxNXI-Mx/X |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-76xxNXI-Mx/X |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-77xxNXI-Mx/X |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-96xxNXI-Mx/X |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-96xxxNXI-Mx/X |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-96xxxNXI-Hx/AI |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-96xxNXI-Mx/AI |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-67xxNXI-Mx/AI |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-67xxxNXI-Mx/AI |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-67xxNXI-S/T |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-67xxNXI-S |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-6704NXI/AI |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-67xxNXI-P1 |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-7608NXI-P2 |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-77xxNXI-P4 |
Affected:
Build date before 250807
|
|
| Hikvision | iDS-96xxNXI-Px |
Affected:
Build date before 250807
|
|
| Hikvision | DS-2CD1xxxG2 |
Affected:
Versions below V5.7.13_230822 (including V5.7.13_230822)
|
|
| Hikvision | DS-2CD3xx1G2 |
Affected:
Versions below V5.7.13_230822 (including V5.7.13_230822)
|
|
| Hikvision | HWI-xxxxHA |
Affected:
Versions below V5.7.13_230822 (including V5.7.13_230822)
|
|
| Hikvision | IPC-xxxxHA |
Affected:
Versions below V5.7.13_230822 (including V5.7.13_230822)
|
|
| Hikvision | DS-2CD2Dx5G1 |
Affected:
Versions below V5.7.210_240826 (including V5.7.210_240826)
|
|
| Hikvision | DS-2CD64x5G1 |
Affected:
Versions below V5.7.210_240826 (including V5.7.210_240826)
|
|
| Hikvision | DS-2CD29xxG0 |
Affected:
Versions below V5.7.21_240814 (including V5.7.21_240814)
|
|
| Hikvision | DS-2XE6xxxG0 |
Affected:
Versions below V5.7.7build241203 (including V5.7.7build241203)
|
|
| Hikvision | DS-2XC6xxxG0 |
Affected:
Versions below V5.7.7build241203 (including V5.7.7build241203)
|
|
| Hikvision | DS-2CD1xxxG0(T) |
Affected:
Versions below V5.7.23_241015 (including V5.7.23_241015)
|
|
| Hikvision | DS-2CD1xx1 |
Affected:
Versions below V5.7.23_241015 (including V5.7.23_241015)
|
|
| Hikvision | DS-2CD3xx1G0 |
Affected:
Versions below V5.7.23_241015 (including V5.7.23_241015)
|
|
| Hikvision | DS-2CD2xx1G0 |
Affected:
Versions below V5.7.23_241015 (including V5.7.23_241015)
|
|
| Hikvision | IPC-xxxxH |
Affected:
Versions below V5.7.23_241015 (including V5.7.23_241015)
|
|
| Hikvision | HWI-xxxH(C) |
Affected:
Versions below V5.7.23_241015 (including V5.7.23_241015)
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-66177",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-01-13T14:26:06.385030Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "CWE-121 Stack-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-01-13T17:27:13.199Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DS-96xxxNI-Hx",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-96xxxNI-Ix",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-96xxNXI-Sx",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-96xxxNXI-Sx",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-76xxNXI-Mx/VPro",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-96xxNXI-Mx/VPro",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-76xxNI-Mx",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-77xxNI-Mx",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-96xxNXI-Mx",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-96xxxNXI-Mx",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-86xxxNXI-Mx",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-76xxNXI-Ix/S",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-77xxNXI-Ix/S",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-86xxNXI-Ix/S",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-96xxNXI-Ix/S",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-76xxNXI-Ix/VPro",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-77xxNXI-Ix/VPro",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-76xxNXI-Kx(/xP) including(D)\u3001(E)\u3001(B)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-77xxNXI-Kx(/xP) including(D)\u3001(E)\u3001(B)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-76xxNXI-Kx(/xP)/Vpro",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-77xxNXI-Kx(/xP)/Vpro",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-76xxNI-Qx(/xP) including(D)\u3001(E)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-71xxNI-Q1(/xP)/M",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-71xxNI-Q1(/xP)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-710xNI-G1/(xP)/M",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-71xxNI-Q1(/xP)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-71xxNI-Q1(/xP)/M",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-76xxNI-Q1(/xP)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-76xxNI-Q2(/xP)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-76xxNXI-K1(/xP)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-76xxNXI-K2(/xP)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-77xxNXI-K4(/xP)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-86xxNXI-K8(/xP)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-76xxNXI-K1(/xP)/VPro",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-76xxNXI-K2(/xP)/VPro",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-77xxNXI-K4(/xP)/VPro",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-71xxHGHI-M1(/T)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-72xxHGHI-M1(/T)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-71xxHQHI-M1(/T)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-72xxHQHI-M1(/T)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-72xxHQHI-Mx/XT",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-72xxHUHI-Mx/XT",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-72xxHTHI-Mx/XT",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-90xxHUHI-M8/S(S)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-73xxHUHI-M4/S(S)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-81xxHUHI-M8/S(S)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-71xxHGHI-M1(/T)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-72xxHGHI-M1(/T)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-ExxHGHI-xx",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-71xxHQHI-M1/S",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-72xxHQHI-M1/E",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-71xxHQHI-M1/T",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-72xxHQHI-M1/T",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-72xxHQHI-Mx/XT",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-73xxHQHI-M4/S",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-81xxHQHI-M8/S",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-90xxHQHI-M8/S",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-ExxHQHI-xx",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-71xxHUHI-M1/S",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-72xxHUHI-M1/E",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-72xxHUHI-M1/T",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-72xxHUHI-Mx/X",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-72xxHUHI-Mx/XT",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-72xxHUHI-Mx/PXT",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-73xxHUHI-M4/S",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-90xxHUHI-M8/S",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-ExxHUHI-xx",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-72xxHTHI-Mx/XT",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-A806xxSI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-AT1000SI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-96xxxNXI-Hx",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-96064NXI-I16",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-96xxxNXI-Ix/AI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-67xxNXI-Mx/X",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-76xxNXI-Mx/X",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-77xxNXI-Mx/X",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-96xxNXI-Mx/X",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-96xxxNXI-Mx/X",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-96xxxNXI-Hx/AI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-96xxNXI-Mx/AI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-67xxNXI-Mx/AI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-67xxxNXI-Mx/AI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-67xxNXI-S/T",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-67xxNXI-S",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-6704NXI/AI",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-67xxNXI-P1",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-7608NXI-P2",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-77xxNXI-P4",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "iDS-96xxNXI-Px",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Build date before 250807"
}
]
},
{
"product": "DS-2CD1xxxG2",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.13_230822 (including V5.7.13_230822)"
}
]
},
{
"product": "DS-2CD3xx1G2",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.13_230822 (including V5.7.13_230822)"
}
]
},
{
"product": "HWI-xxxxHA",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.13_230822 (including V5.7.13_230822)"
}
]
},
{
"product": "IPC-xxxxHA",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.13_230822 (including V5.7.13_230822)"
}
]
},
{
"product": "DS-2CD2Dx5G1",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.210_240826 (including V5.7.210_240826)"
}
]
},
{
"product": "DS-2CD64x5G1",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.210_240826 (including V5.7.210_240826)"
}
]
},
{
"product": "DS-2CD29xxG0",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.21_240814 (including V5.7.21_240814)"
}
]
},
{
"product": "DS-2XE6xxxG0",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.7build241203 (including V5.7.7build241203)"
}
]
},
{
"product": "DS-2XC6xxxG0",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.7build241203 (including V5.7.7build241203)"
}
]
},
{
"product": "DS-2CD1xxxG0(T)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.23_241015 (including V5.7.23_241015)"
}
]
},
{
"product": "DS-2CD1xx1",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.23_241015 (including V5.7.23_241015)"
}
]
},
{
"product": "DS-2CD3xx1G0",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.23_241015 (including V5.7.23_241015)"
}
]
},
{
"product": "DS-2CD2xx1G0",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.23_241015 (including V5.7.23_241015)"
}
]
},
{
"product": "IPC-xxxxH",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.23_241015 (including V5.7.23_241015)"
}
]
},
{
"product": "HWI-xxxH(C)",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V5.7.23_241015 (including V5.7.23_241015)"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Angel Lozano Alcazar"
},
{
"lang": "en",
"type": "finder",
"value": "Pedro Guillen Nu\u00f1ez"
}
],
"descriptions": [
{
"lang": "en",
"value": "There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-09T06:22:08.882Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/buffer-overflow-vulnerabilities-in-some-hikvision-products/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2025-66177",
"datePublished": "2026-01-13T01:47:54.031Z",
"dateReserved": "2025-11-24T08:59:35.903Z",
"dateUpdated": "2026-07-09T06:22:08.882Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-66174 (GCVE-0-2025-66174)
Vulnerability from cvelistv5 – Published: 2025-12-19 06:39 – Updated: 2025-12-19 15:41
VLAI
EPSS
VEX
Summary
There is an improper authentication vulnerability in some Hikvision DVR products. Due to the improper implementation of authentication for the serial port, an attacker with physical access could exploit this vulnerability by connecting to the affected products and run a series of commands.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-287 - Improper Authentication
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | DS-7104HGHI-F1 |
Affected:
Versions below V4.30.122_201107 (including V4.30.122_201107)
|
|
| Hikvision | DS-7204HGHI-F1 |
Affected:
Versions below V4.30.122_201107 (including V4.30.122_201107)
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-66174",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-12-19T15:41:12.037984Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "CWE-287 Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-12-19T15:41:32.976Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DS-7104HGHI-F1",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V4.30.122_201107 (including V4.30.122_201107)"
}
]
},
{
"product": "DS-7204HGHI-F1",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V4.30.122_201107 (including V4.30.122_201107)"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Aaron J Jose"
}
],
"descriptions": [
{
"lang": "en",
"value": "There is an improper authentication vulnerability in some Hikvision DVR products. Due to the improper implementation of authentication for the serial port, an attacker with physical access could exploit this vulnerability by connecting to the affected products and run a series of commands."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-12-19T06:45:55.453Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/serial-port-privilege-escalation-vulnerabilities-in-some-hikvision-nvr-devices/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2025-66174",
"datePublished": "2025-12-19T06:39:51.404Z",
"dateReserved": "2025-11-24T08:59:35.903Z",
"dateUpdated": "2025-12-19T15:41:32.976Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2025-66173 (GCVE-0-2025-66173)
Vulnerability from cvelistv5 – Published: 2025-12-19 06:39 – Updated: 2025-12-19 15:40
VLAI
EPSS
VEX
Summary
There is a privilege escalation vulnerability in some Hikvision DVR products. Due to the improper implementation of authentication for the serial port, an attacker with physical access could exploit this vulnerability by connecting to the affected products and gaining access to an unrestricted shell environment.
Severity
6.2 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-269 - Improper Privilege Management
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | DS-7104HGHI-F1 |
Affected:
Versions below V4.30.122_201107 (including V4.30.122_201107)
|
|
| Hikvision | DS-7204HGHI-F1 |
Affected:
Versions below V4.30.122_201107 (including V4.30.122_201107)
|
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-66173",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-12-19T15:40:25.549400Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-269",
"description": "CWE-269 Improper Privilege Management",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-12-19T15:40:52.217Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DS-7104HGHI-F1",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V4.30.122_201107 (including V4.30.122_201107)"
}
]
},
{
"product": "DS-7204HGHI-F1",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "Versions below V4.30.122_201107 (including V4.30.122_201107)"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Aaron J Jose"
}
],
"descriptions": [
{
"lang": "en",
"value": "There is a privilege escalation vulnerability in some Hikvision DVR products. Due to the improper implementation of authentication for the serial port, an attacker with physical access could exploit this vulnerability by connecting to the affected products and gaining access to an unrestricted shell environment."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "PHYSICAL",
"availabilityImpact": "HIGH",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-12-19T06:45:40.814Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/serial-port-privilege-escalation-vulnerabilities-in-some-hikvision-nvr-devices/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2025-66173",
"datePublished": "2025-12-19T06:39:38.504Z",
"dateReserved": "2025-11-24T08:59:35.902Z",
"dateUpdated": "2025-12-19T15:40:52.217Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2024-58274 (GCVE-0-2024-58274)
Vulnerability from cvelistv5 – Published: 2025-10-22 00:00 – Updated: 2025-10-22 13:55Summary
Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2024-08-01 allows execution of a command within $( ) in /center/api/installation/detection JSON data, as exploited in the wild in 2024 and 2025.
Severity
8.3 (High)
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | CSMP iSecure Center |
Affected:
0 , ≤ 2024-08-01
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-58274",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-10-22T13:55:11.718588Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-10-22T13:55:16.083Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://xz.aliyun.com/news/14639"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "CSMP iSecure Center",
"vendor": "Hikvision",
"versions": [
{
"lessThanOrEqual": "2024-08-01",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2024-08-01 allows execution of a command within $( ) in /center/api/installation/detection JSON data, as exploited in the wild in 2024 and 2025."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-10-22T03:45:04.855Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://github.com/ahisec/nuclei-tps/blob/main/http/vulnerabilities/hikvision/hikvision-csmp-installation-rce.yaml"
},
{
"url": "https://forum.butian.net/article/498"
},
{
"url": "https://xz.aliyun.com/news/14639"
}
],
"x_generator": {
"engine": "enrichogram 0.0.1"
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2024-58274",
"datePublished": "2025-10-22T00:00:00.000Z",
"dateReserved": "2025-10-22T00:00:00.000Z",
"dateUpdated": "2025-10-22T13:55:16.083Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-53691 (GCVE-0-2023-53691)
Vulnerability from cvelistv5 – Published: 2025-10-22 00:00 – Updated: 2025-10-22 13:56Summary
Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2023-06-25 allows file upload via /center/api/files directory traversal, as exploited in the wild in 2024 and 2025.
Severity
8.3 (High)
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-24 - Path Traversal: '../filedir'
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Hikvision | CSMP iSecure Center |
Affected:
0 , ≤ 2023-06-25
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-53691",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-10-22T13:56:40.313239Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-10-22T13:56:44.179Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://zhuanlan.zhihu.com/p/639514473"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unknown",
"product": "CSMP iSecure Center",
"vendor": "Hikvision",
"versions": [
{
"lessThanOrEqual": "2023-06-25",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2023-06-25 allows file upload via /center/api/files directory traversal, as exploited in the wild in 2024 and 2025."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 8.3,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-24",
"description": "CWE-24 Path Traversal: \u0027../filedir\u0027",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-10-22T03:42:57.265Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://zhuanlan.zhihu.com/p/639514473"
}
],
"x_generator": {
"engine": "enrichogram 0.0.1"
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2023-53691",
"datePublished": "2025-10-22T00:00:00.000Z",
"dateReserved": "2025-10-22T00:00:00.000Z",
"dateUpdated": "2025-10-22T13:56:44.179Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}