Skip to content
Noroxi

Hikvision records

37 published records for vendor hikvision.

Researcher profile

Entered KEV
2 · 5.4%
Weaponized
3 · 8.1%
Pre-auth RCE
7
With a fix record
8.1%
Median publish → KEV
1668 days

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

37 records
  • CVE-2017-7921
    99Now

    An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    hikvision · ds-2cd2032-i firmwareMay 5, 2017

  • CVE-2021-36260
    99Now

    A command injection vulnerability in the web server of some Hikvision product.

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    hikvision · ds-2cd2026g2-iu\/sl firmwareSep 22, 2021

  • CVE-2023-6895
    66This week

    Hikvision Intercom Broadcasting System ping.php os command injection

    CriticalCVSS 9.8Proof of conceptEPSS 89%

    hikvision · intercom broadcast systemDec 17, 2023

  • CVE-2022-28171
    54Plan

    The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability.

    CriticalCVSS 9.8Proof of conceptEPSS 51%

    hikvision · ds-a71024 firmwareJun 27, 2022

  • CVE-2014-4880
    51Plan

    Buffer overflow in Hikvision DVR DS-7204 Firmware 2.2.10 build 131009, and other models and versions, allows remote attackers to execute arb

    HighCVSS 7.5WeaponizedEPSS 70%

    hikvision · dvr ds-7204 firmwareDec 8, 2014

  • CVE-2023-6893
    51Plan

    Hikvision Intercom Broadcasting System exportrecord.php path traversal

    HighCVSS 7.5No exploitEPSS 70%

    hikvision · intercom broadcast systemDec 17, 2023

  • CVE-2013-4976
    50Plan

    Hikvision DS-2CD7153-E IP Camera has security bypass via hardcoded credentials

    CriticalCVSS 9.8Proof of conceptEPSS 36%

    hikvision · ds-2cd7153-e firmwareDec 27, 2019

  • CVE-2013-4977
    45Plan

    Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 (Jan 2013), and possibly other de

    CriticalCVSS 10.0Proof of conceptEPSS 17%

    hikvision · ds-2cd7153-e firmwareMar 3, 2014

  • CVE-2018-6414
    40Plan

    A buffer overflow vulnerability in the web server of some Hikvision IP Cameras allows an attacker to send a specially crafted message to aff

    CriticalCVSS 9.8No exploitEPSS 2%

    hikvision · ip camerasAug 13, 2018

  • CVE-2013-4975
    39Monitor

    Hikvision DS-2CD7153-E IP Camera has Privilege Escalation

    HighCVSS 8.8Proof of conceptEPSS 12%

    hikvision · ds-2cd7153-e firmwareDec 27, 2019

  • CVE-2023-28812
    39Monitor

    There is a buffer overflow vulnerability in a web browser plug-in could allow an attacker to exploit the vulnerability by sending crafted me

    CriticalCVSS 9.8No exploitEPSS 0%

    hikvision · localservicecomponentsNov 23, 2023

  • CVE-2023-28808
    39Monitor

    Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the admin permission.

    CriticalCVSS 9.8No exploitEPSS 0%

    hikvision · ds-a71024 firmwareApr 11, 2023

  • CVE-2022-28173
    39Monitor

    The web server of some Hikvision wireless bridge products have an access control vulnerability which can be used to obtain the admin permiss

    CriticalCVSS 9.8No exploitEPSS 0%

    hikvision · ds-3wf0ac-2nt firmwareDec 19, 2022

  • CVE-2017-7923
    36Monitor

    A Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2x

    HighCVSS 8.8No exploitEPSS 2%

    hikvision · ds-2cd2032-i firmwareMay 5, 2017

  • CVE-2025-66176
    35Monitor

    There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products.

    HighCVSS 8.8No exploitEPSS 0%

    hikvision · ds-k1t331 firmwareJan 12, 2026

  • CVE-2018-6413
    31Monitor

    There is a buffer overflow in the Hikvision Camera DS-2CD9111-S of V4.1.2 build 160203 and before, and this vulnerability allows remote atta

    HighCVSS 7.5No exploitEPSS 1%

    hikvision · ds-2cd9111-s firmwareApr 18, 2018

  • CVE-2017-13774
    31Monitor

    Hikvision iVMS-4200 devices before v2.6.2.7 allow local users to generate password-recovery codes via unspecified vectors.

    HighCVSS 7.8No exploitEPSS 0%

    hikvision · ivms-4200Aug 30, 2017

  • CVE-2023-33806
    31Monitor

    Insecure default configurations in Hikvision Interactive Tablet DS-D5B86RB/B V2.3.0 build220119, allows attackers to execute arbitrary comma

    HighCVSS 7.8No exploitEPSS 0%

    hikvision · ds-d5b86rb\/b firmwareApr 15, 2024

  • CVE-2023-28809
    30Monitor

    Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user su

    HighCVSS 7.5No exploitEPSS 0%

    hikvision · ds-k1t320efwx firmwareJun 15, 2023

  • CVE-2023-28813
    30Monitor

    An attacker could exploit a vulnerability by sending crafted messages to computers installed with this plug-in to modify plug-in parameters,

    HighCVSS 7.5No exploitEPSS 0%

    hikvision · localservicecomponentsNov 23, 2023

  • CVE-2024-25063
    30Monitor

    Due to insufficient server-side validation, a successful exploit of this vulnerability could allow an attacker to gain access to certain URL

    HighCVSS 7.5No exploitEPSS 0%

    hikvision · hikcentral professionalMar 1, 2024

  • CVE-2024-29949
    28Monitor

    There is a command injection vulnerability in some Hikvision NVRs.

    HighCVSS 7.2No exploitEPSS 1%

    hikvision · ds-7604ni-k1 / 4p(b)Apr 2, 2024

  • CVE-2024-47487
    28Monitor

    There is a SQL injection vulnerability in some HikCentral Professional versions.

    HighCVSS 7.2No exploitEPSS 0%

    hikvision · hikcentral professionalOct 18, 2024

  • CVE-2025-66174
    27Monitor

    There is an improper authentication vulnerability in some Hikvision DVR products.

    MediumCVSS 6.8No exploitEPSS 0%

    hikvision · ds-7104hghi-f1 firmwareDec 19, 2025

  • CVE-2015-4409
    26Monitor

    Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial o

    MediumCVSS 6.5No exploitEPSS 1%

    hikvision · ds-76xxx series firmwareMar 13, 2017