RCE Vulnerability in Hikvision Cameras (CVE-2021-36260)

🗓️ 28 Sep 2021 00:00:00Reported by CISAType

RCE Vulnerability in Hikvision Cameras (CVE-2021-36260). Mitigate command injection vulnerability in web server service. Remote attacker could take control of affected device. Apply latest firmware updates

Reporter	Title	Published	Views	Family All 76
Gitee	Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl_Firmware	25 Dec 202111:34	–	gitee
Gitee	Exploit for Improper Authentication in Dahuasecurity Ipc-Hum7Xxx_Firmware	6 Jul 202502:39	–	gitee
Gitee	Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl_Firmware	6 Sep 202511:51	–	gitee
zdt	Hikvision Web Server Build 210702 - Command Injection Exploit	25 Oct 202100:00	–	zdt
zdt	Hikvision IP Camera Unauthenticated Command Injection Exploit	28 Feb 202200:00	–	zdt
GithubExploit	Exploit for CVE-2014-8361	31 Mar 202611:18	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Hikvision Ds-2Cd2032-I_Firmware	21 Jan 202616:04	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl_Firmware	21 Jan 202613:25	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl_Firmware	3 Aug 202217:27	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl_Firmware	28 Aug 202203:11	–	githubexploit

Source	Link
hikvision	www.hikvision.com/en/support/cybersecurity/security-advisory/security-notification-command-injection-vulnerability-in-some-hikvision-products/security-notification-command-injection-vulnerability-in-some-hikvision-products/
watchfulip	www.watchfulip.github.io/2021/09/18/Hikvision-IP-Camera-Unauthenticated-RCE.html

29 Sep 2021 00:00Current

0.8Low risk

Vulners AI Score0.8

EPSS0.99869