Thousands of Hikvision video cameras remain unpatched and vulnerable to takeover

🗓️ 23 Aug 2022 13:00:00Reported by Malwarebytes blogType

malwarebytes

malwarebytes🔗 www.malwarebytes.com👁 702 Views

Thousands of Hikvision cameras remain vulnerable to takeover due to unpatched critical CVE-2021-36260 fla

Reporter	Title	Published	Views	Family All 59
Gitee	Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl_Firmware	25 Dec 202111:34	–	gitee
Gitee	Exploit for Improper Authentication in Dahuasecurity Ipc-Hum7Xxx_Firmware	6 Jul 202502:39	–	gitee
Gitee	Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl_Firmware	6 Sep 202511:51	–	gitee
zdt	Hikvision Web Server Build 210702 - Command Injection Exploit	25 Oct 202100:00	–	zdt
zdt	Hikvision IP Camera Unauthenticated Command Injection Exploit	28 Feb 202200:00	–	zdt
GithubExploit	Exploit for CVE-2014-8361	31 Mar 202611:18	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Hikvision Ds-2Cd2032-I_Firmware	21 Jan 202616:04	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl_Firmware	21 Jan 202613:25	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl_Firmware	3 Aug 202217:27	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl_Firmware	28 Aug 202203:11	–	githubexploit

23 Aug 2022 13:00Current

10High risk

Vulners AI Score10

EPSS0.99869

hikvision vulnerability takeover firmware update exploitation webserver botnet command injection security update mitigation vpn