Hikvision kayıtları
hikvision üreticisine ait 37 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 2 · %5,4
- Silahlaştırılmış
- 3 · %8,1
- Pre-auth RCE
- 7
- Düzeltme kaydı olan
- %8,1
- Yayından KEV’e ortanca
- 1668 gün
Tekrar eden sınıflar
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer7
- CWE-284 Improper Access Control4
- CWE-287 Improper Authentication3
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
37 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
99Hemen | CVE-2017-7921Silahlaştırılmış | An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I hikvision · ds-2cd2032-i firmware · CWE-287 | Kritik9,8 | KEV | %100,0 | 5 May 2017 |
99Hemen | CVE-2021-36260Silahlaştırılmış | A command injection vulnerability in the web server of some Hikvision product.hikvision · ds-2cd2026g2-iu\/sl firmware · CWE-78 | Kritik9,8 | KEV | %99,9 | 22 Eyl 2021 |
66Bu hafta | CVE-2023-6895Kavram kanıtı | Hikvision Intercom Broadcasting System ping.php os command injectionhikvision · intercom broadcast system · CWE-78 | Kritik9,8 | — | %89,1 | 17 Ara 2023 |
54Planlayın | CVE-2022-28171Kavram kanıtı | The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability.hikvision · ds-a71024 firmware · CWE-78 | Kritik9,8 | — | %51,6 | 27 Haz 2022 |
51Planlayın | CVE-2014-4880Silahlaştırılmış | Buffer overflow in Hikvision DVR DS-7204 Firmware 2.2.10 build 131009, and other models and versions, allows remote attackers to execute arbhikvision · dvr ds-7204 firmware · CWE-119 | Yüksek7,5 | — | %70,7 | 8 Ara 2014 |
51Planlayın | CVE-2023-6893İstismar yok | Hikvision Intercom Broadcasting System exportrecord.php path traversalhikvision · intercom broadcast system · CWE-22 | Yüksek7,5 | — | %70,2 | 17 Ara 2023 |
50Planlayın | CVE-2013-4976Kavram kanıtı | Hikvision DS-2CD7153-E IP Camera has security bypass via hardcoded credentialshikvision · ds-2cd7153-e firmware · CWE-287 | Kritik9,8 | — | %36,1 | 27 Ara 2019 |
45Planlayın | CVE-2013-4977Kavram kanıtı | Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 (Jan 2013), and possibly other dehikvision · ds-2cd7153-e firmware · CWE-119 | Kritik10,0 | — | %17,0 | 3 Mar 2014 |
40Planlayın | CVE-2018-6414İstismar yok | A buffer overflow vulnerability in the web server of some Hikvision IP Cameras allows an attacker to send a specially crafted message to affhikvision · ip cameras · CWE-119 | Kritik9,8 | — | %2,3 | 13 Ağu 2018 |
39İzleyin | CVE-2013-4975Kavram kanıtı | Hikvision DS-2CD7153-E IP Camera has Privilege Escalationhikvision · ds-2cd7153-e firmware · CWE-269 | Yüksek8,8 | — | %12,3 | 27 Ara 2019 |
39İzleyin | CVE-2023-28812İstismar yok | There is a buffer overflow vulnerability in a web browser plug-in could allow an attacker to exploit the vulnerability by sending crafted mehikvision · localservicecomponents · CWE-120 | Kritik9,8 | — | %1,0 | 23 Kas 2023 |
39İzleyin | CVE-2023-28808İstismar yok | Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the admin permission.hikvision · ds-a71024 firmware · CWE-284 | Kritik9,8 | — | %0,8 | 11 Nis 2023 |
39İzleyin | CVE-2022-28173İstismar yok | The web server of some Hikvision wireless bridge products have an access control vulnerability which can be used to obtain the admin permisshikvision · ds-3wf0ac-2nt firmware · CWE-284 | Kritik9,8 | — | %0,6 | 19 Ara 2022 |
36İzleyin | CVE-2017-7923İstismar yok | A Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xhikvision · ds-2cd2032-i firmware · CWE-260 | Yüksek8,8 | — | %2,3 | 5 May 2017 |
35İzleyin | CVE-2025-66176İstismar yok | There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products.hikvision · ds-k1t331 firmware · CWE-121 | Yüksek8,8 | — | %0,5 | 12 Oca 2026 |
31İzleyin | CVE-2018-6413İstismar yok | There is a buffer overflow in the Hikvision Camera DS-2CD9111-S of V4.1.2 build 160203 and before, and this vulnerability allows remote attahikvision · ds-2cd9111-s firmware · CWE-119 | Yüksek7,5 | — | %1,7 | 18 Nis 2018 |
31İzleyin | CVE-2017-13774İstismar yok | Hikvision iVMS-4200 devices before v2.6.2.7 allow local users to generate password-recovery codes via unspecified vectors.hikvision · ivms-4200 · CWE-200 | Yüksek7,8 | — | %0,5 | 30 Ağu 2017 |
31İzleyin | CVE-2023-33806İstismar yok | Insecure default configurations in Hikvision Interactive Tablet DS-D5B86RB/B V2.3.0 build220119, allows attackers to execute arbitrary commahikvision · ds-d5b86rb\/b firmware · CWE-77 | Yüksek7,8 | — | %0,2 | 15 Nis 2024 |
30İzleyin | CVE-2023-28809İstismar yok | Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user suhikvision · ds-k1t320efwx firmware · CWE-284 | Yüksek7,5 | — | %0,6 | 15 Haz 2023 |
30İzleyin | CVE-2023-28813İstismar yok | An attacker could exploit a vulnerability by sending crafted messages to computers installed with this plug-in to modify plug-in parameters,hikvision · localservicecomponents | Yüksek7,5 | — | %0,6 | 23 Kas 2023 |
30İzleyin | CVE-2024-25063İstismar yok | Due to insufficient server-side validation, a successful exploit of this vulnerability could allow an attacker to gain access to certain URLhikvision · hikcentral professional · CWE-285 | Yüksek7,5 | — | %0,6 | 1 Mar 2024 |
28İzleyin | CVE-2024-29949İstismar yok | There is a command injection vulnerability in some Hikvision NVRs.hikvision · ds-7604ni-k1 / 4p(b) · CWE-77 | Yüksek7,2 | — | %1,3 | 2 Nis 2024 |
28İzleyin | CVE-2024-47487İstismar yok | There is a SQL injection vulnerability in some HikCentral Professional versions.hikvision · hikcentral professional · CWE-89 | Yüksek7,2 | — | %0,5 | 18 Eki 2024 |
27İzleyin | CVE-2025-66174İstismar yok | There is an improper authentication vulnerability in some Hikvision DVR products.hikvision · ds-7104hghi-f1 firmware · CWE-287 | Orta6,8 | — | %0,4 | 19 Ara 2025 |
26İzleyin | CVE-2015-4409İstismar yok | Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial ohikvision · ds-76xxx series firmware · CWE-119 | Orta6,5 | — | %1,3 | 13 Mar 2017 |
- CVE-2017-792199Hemen
An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100hikvision · ds-2cd2032-i firmware5 May 2017
- CVE-2021-3626099Hemen
A command injection vulnerability in the web server of some Hikvision product.
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100hikvision · ds-2cd2026g2-iu\/sl firmware22 Eyl 2021
- CVE-2023-689566Bu hafta
Hikvision Intercom Broadcasting System ping.php os command injection
KritikCVSS 9,8Kavram kanıtıEPSS %89hikvision · intercom broadcast system17 Ara 2023
- CVE-2022-2817154Planlayın
The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability.
KritikCVSS 9,8Kavram kanıtıEPSS %52hikvision · ds-a71024 firmware27 Haz 2022
- CVE-2014-488051Planlayın
Buffer overflow in Hikvision DVR DS-7204 Firmware 2.2.10 build 131009, and other models and versions, allows remote attackers to execute arb
YüksekCVSS 7,5SilahlaştırılmışEPSS %71hikvision · dvr ds-7204 firmware8 Ara 2014
- CVE-2023-689351Planlayın
Hikvision Intercom Broadcasting System exportrecord.php path traversal
YüksekCVSS 7,5İstismar yokEPSS %70hikvision · intercom broadcast system17 Ara 2023
- CVE-2013-497650Planlayın
Hikvision DS-2CD7153-E IP Camera has security bypass via hardcoded credentials
KritikCVSS 9,8Kavram kanıtıEPSS %36hikvision · ds-2cd7153-e firmware27 Ara 2019
- CVE-2013-497745Planlayın
Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 (Jan 2013), and possibly other de
KritikCVSS 10,0Kavram kanıtıEPSS %17hikvision · ds-2cd7153-e firmware3 Mar 2014
- CVE-2018-641440Planlayın
A buffer overflow vulnerability in the web server of some Hikvision IP Cameras allows an attacker to send a specially crafted message to aff
KritikCVSS 9,8İstismar yokEPSS %2hikvision · ip cameras13 Ağu 2018
- CVE-2013-497539İzleyin
Hikvision DS-2CD7153-E IP Camera has Privilege Escalation
YüksekCVSS 8,8Kavram kanıtıEPSS %12hikvision · ds-2cd7153-e firmware27 Ara 2019
- CVE-2023-2881239İzleyin
There is a buffer overflow vulnerability in a web browser plug-in could allow an attacker to exploit the vulnerability by sending crafted me
KritikCVSS 9,8İstismar yokEPSS %1hikvision · localservicecomponents23 Kas 2023
- CVE-2023-2880839İzleyin
Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the admin permission.
KritikCVSS 9,8İstismar yokEPSS %1hikvision · ds-a71024 firmware11 Nis 2023
- CVE-2022-2817339İzleyin
The web server of some Hikvision wireless bridge products have an access control vulnerability which can be used to obtain the admin permiss
KritikCVSS 9,8İstismar yokEPSS %1hikvision · ds-3wf0ac-2nt firmware19 Ara 2022
- CVE-2017-792336İzleyin
A Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2x
YüksekCVSS 8,8İstismar yokEPSS %2hikvision · ds-2cd2032-i firmware5 May 2017
- CVE-2025-6617635İzleyin
There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products.
YüksekCVSS 8,8İstismar yokEPSS %0hikvision · ds-k1t331 firmware12 Oca 2026
- CVE-2018-641331İzleyin
There is a buffer overflow in the Hikvision Camera DS-2CD9111-S of V4.1.2 build 160203 and before, and this vulnerability allows remote atta
YüksekCVSS 7,5İstismar yokEPSS %2hikvision · ds-2cd9111-s firmware18 Nis 2018
- CVE-2017-1377431İzleyin
Hikvision iVMS-4200 devices before v2.6.2.7 allow local users to generate password-recovery codes via unspecified vectors.
YüksekCVSS 7,8İstismar yokEPSS %0hikvision · ivms-420030 Ağu 2017
- CVE-2023-3380631İzleyin
Insecure default configurations in Hikvision Interactive Tablet DS-D5B86RB/B V2.3.0 build220119, allows attackers to execute arbitrary comma
YüksekCVSS 7,8İstismar yokEPSS %0hikvision · ds-d5b86rb\/b firmware15 Nis 2024
- CVE-2023-2880930İzleyin
Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user su
YüksekCVSS 7,5İstismar yokEPSS %1hikvision · ds-k1t320efwx firmware15 Haz 2023
- CVE-2023-2881330İzleyin
An attacker could exploit a vulnerability by sending crafted messages to computers installed with this plug-in to modify plug-in parameters,
YüksekCVSS 7,5İstismar yokEPSS %1hikvision · localservicecomponents23 Kas 2023
- CVE-2024-2506330İzleyin
Due to insufficient server-side validation, a successful exploit of this vulnerability could allow an attacker to gain access to certain URL
YüksekCVSS 7,5İstismar yokEPSS %1hikvision · hikcentral professional1 Mar 2024
- CVE-2024-2994928İzleyin
There is a command injection vulnerability in some Hikvision NVRs.
YüksekCVSS 7,2İstismar yokEPSS %1hikvision · ds-7604ni-k1 / 4p(b)2 Nis 2024
- CVE-2024-4748728İzleyin
There is a SQL injection vulnerability in some HikCentral Professional versions.
YüksekCVSS 7,2İstismar yokEPSS %0hikvision · hikcentral professional18 Eki 2024
- CVE-2025-6617427İzleyin
There is an improper authentication vulnerability in some Hikvision DVR products.
OrtaCVSS 6,8İstismar yokEPSS %0hikvision · ds-7104hghi-f1 firmware19 Ara 2025
- CVE-2015-440926İzleyin
Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial o
OrtaCVSS 6,5İstismar yokEPSS %1hikvision · ds-76xxx series firmware13 Mar 2017