Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2021-36260
HistorySep 22, 2021 - 1:15 p.m.

CVE-2021-36260

2021-09-2213:15:00
CWE-78
[email protected]
web.nvd.nist.gov
1446
In Wild
17
cve-2021-36260
command injection
web server
hikvision
vulnerability
nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.975 High

EPSS

Percentile

100.0%

JSON

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.

CPENameOperatorVersion
hikvision:ds-2cd2026g2-iu\/sl_firmwarehikvision ds-2cd2026g2-iu\/sl firmwareeq-
hikvision:ds-2cd2046g2-iu\/sl_firmwarehikvision ds-2cd2046g2-iu\/sl firmwareeq-
hikvision:ds-2cd2066g2-i\(u\)_firmwarehikvision ds-2cd2066g2-i\(u\) firmwareeq-
hikvision:ds-2cd2066g2-iu\/sl_firmwarehikvision ds-2cd2066g2-iu\/sl firmwareeq-
hikvision:ds-2cd2086g2-i\(u\)_firmwarehikvision ds-2cd2086g2-i\(u\) firmwareeq-
hikvision:ds-2cd2086g2-iu\/sl_firmwarehikvision ds-2cd2086g2-iu\/sl firmwareeq-
hikvision:ds-2cd2166g2-i\(su\)_firmwarehikvision ds-2cd2166g2-i\(su\) firmwareeq-
hikvision:ds-2cd2186g2-i\(su\)_firmwarehikvision ds-2cd2186g2-i\(su\) firmwareeq-
hikvision:ds-2cd2186g2-isu_firmwarehikvision ds-2cd2186g2-isu firmwareeq-
hikvision:ds-2cd2326g2-isu\/sl_firmwarehikvision ds-2cd2326g2-isu\/sl firmwareeq-
Rows per page:
1-10 of 2561

Social References

More

Related

zdt 2
prion 1
cisa 2
threatpost 2
githubexploit 8
packetstorm 2
malwarebytes 3
cisa_kev 1
checkpoint_advisories 1
nessus 1
metasploit 1
nuclei 1
exploitdb 1
attackerkb 1
securelist 1
thn 1
rapid7blog 1
qualysblog 1
avleonov 1
ics 1
mssecure 1
mmpc 1
zdt
zdt
Hikvision IP Camera Unauthenticated Command Injection Exploit
2022-02-28 00:00:00
Hikvision Web Server Build 210702 - Command Injection Exploit
2021-10-25 00:00:00
prion
prion
Command injection
2021-09-22 13:15:00
cisa
cisa
RCE Vulnerability in Hikvision Cameras (CVE-2021-36260)
2021-09-28 00:00:00
CISA Adds 15 Known Exploited Vulnerabilities to Catalog
2022-01-10 00:00:00
threatpost
threatpost
Moobot Botnet Chews Up Hikvision Surveillance Systems
2021-12-08 20:13:18
Cybercriminals Are Selling Access to Chinese Surveillance Cameras
2022-08-25 18:47:15
githubexploit
githubexploit
Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl Firmware
2021-11-03 08:11:49
Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl Firmware
2022-08-03 17:27:59
Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl Firmware
2021-10-18 06:40:48
packetstorm
packetstorm
Hikvision Web Server Build 210702 Command Injection
2021-10-25 00:00:00
Hikvision IP Camera Unauthenticated Command Injection
2022-02-28 00:00:00
malwarebytes
malwarebytes
Thousands of Hikvision video cameras remain unpatched and vulnerable to takeover
2022-08-23 13:00:00
Patch now! Insecure Hikvision security cameras can be taken over remotely
2021-09-22 12:19:40
Chinese APT's favorite vulnerabilities revealed
2022-10-13 16:15:00
cisa_kev
cisa_kev
Hikvision Improper Input Validation
2022-01-10 00:00:00
checkpoint_advisories
checkpoint_advisories
Hikvision Web Server Command Injection (CVE-2021-36260)
2022-03-28 00:00:00
nessus
nessus
Hikivision IP Camera Command Injection Vulnerability
2023-01-13 00:00:00
metasploit
metasploit
Hikvision IP Camera Unauthenticated Command Injection
2022-02-19 21:13:24
nuclei
nuclei
Hikvision IP camera/NVR - Remote Command Execution
2021-10-29 08:17:09
exploitdb
exploitdb
Hikvision Web Server Build 210702 - Command Injection
2021-10-25 00:00:00
attackerkb
attackerkb
CVE-2021-36260
2021-09-22 00:00:00
securelist
securelist
DDoS attacks in Q4 2021
2022-02-10 10:00:04
thn
thn
Over 300,000 MikroTik Devices Found Vulnerable to Remote Hacking Bugs
2021-12-09 11:15:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2022-03-04 21:52:42
qualysblog
qualysblog
NSA Alert: Topmost CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors
2022-10-07 20:03:01
avleonov
avleonov
Joint Advisory AA22-279A and Vulristics
2022-10-21 20:10:13
ics
ics
Top CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors
2022-10-06 12:00:00
mssecure
mssecure
Microsoft research uncovers new Zerobot capabilities
2022-12-21 20:00:00
mmpc
mmpc
Microsoft research uncovers new Zerobot capabilities
2022-12-21 20:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.975 High

EPSS

Percentile

100.0%

JSON
Related for CVE-2021-36260
zdt2prion1cisa2threatpost2githubexploit8packetstorm2malwarebytes3cisa_kev1checkpoint_advisories1nessus1metasploit1nuclei1exploitdb1attackerkb1securelist1thn1rapid7blog1qualysblog1avleonov1ics1mssecure1mmpc1