CVE-2013-4976

Hikvision DS-2CD7153-E IP Camera has security bypass via hardcoded credentials...

CVE-2024-29949

There is a command injection vulnerability in some Hikvision NVRs. This could allow an authenticated user with administrative rights to execute arbitrary commands...

Logic Flaw Vulnerability in DS-A80624S at Hangzhou Hikvision Digital Technology Co.

The DS-A80624S is a 24-drive network storage device from Hikvision. A logic flaw vulnerability exists in the DS-A80624S of Hangzhou Hikvision Digital Technology Co. that can be exploited by an attacker to obtain sensitive information...

CVE-2024-12569

Disclosure of sensitive information in a Milestone XProtect Device Pack driver’s log file for third-party cameras, allows an attacker to read camera credentials stored in the Recording Server under specific conditions...

CVE-2024-12569 Sensitive Information in Driver’s Log File

Disclosure of sensitive information in a Milestone XProtect Device Pack driver’s log file for third-party cameras, allows an attacker to read camera credentials stored in the Recording Server under specific conditions...

CVE-2024-12569 Sensitive Information in Driver’s Log File

Disclosure of sensitive information in a Milestone XProtect Device Pack driver’s log file for third-party cameras, allows an attacker to read camera credentials stored in the Recording Server under specific conditions...

CVE-2024-12569

CVE-2024-12569 describes an information-disclosure in the Milestone XProtect Device Pack driver’s log files, allowing a local attacker to read camera credentials stored in the Recording Server under certain conditions. The vulnerability affects the Milestone XProtect Device Pack camera drivers an...

PT-2024-17657 · Hikvision +1 · Hikvision Camera Driver +1

Name of the Vulnerable Software and Affected Versions: Milestone XProtect Device Pack affected versions not specified HikVision camera driver in XProtect Device Pack affected versions not specified Description: The issue is related to the disclosure of sensitive information in a log file of the...

The vulnerability of the HTTP protocol implementation in DynDNS and NO-IP microprogramming-based IP camera software from Hikvision allows attackers to carry out “man-in-the-middle” attacks.

The vulnerability of the HTTP protocol implementation in DynDNS and NO-IP microprogramming-based IP camera software from Hikvision involves the transmission of confidential information in an unencrypted form. Exploiting this vulnerability could allow a malicious actor to carry out a...

Hikvision network camera security enhancement to prevent cleartext transmission of Dynamic DNS credentials

Overview Multiple network cameras provided by Hangzhou Hikvision Digital Technology Co., Ltd. support two Dynamic DNS services, DynDNS and NO-IP.The user can select which to use on the GUI configuration page. Both the services provide their APIs accessible via HTTP and HTTPS, but old firmware...

JVN#11779839: Hikvision network camera security enhancement to prevent cleartext transmission of Dynamic DNS credentials

Multiple network cameras provided by Hangzhou Hikvision Digital Technology Co., Ltd. support two Dynamic DNS services, DynDNS and NO-IP. The user can select which to use on the GUI configuration page. Both the services provide their APIs accessible via HTTP and HTTPS, but old firmware versions of...

PT-2024-41474 · Hikvision · Ds-2Cd1Xxxg0 +11

Уязвимость реализации протокола HTTP служб DynDNS и NO-IP микропрограммного обеспечения IP-камер Hikvision связана с передачей конфиденциальной информации в незашифрованном виде. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить атаку типа «человек посередине»...

Hikvision HikCentral Professional 安全漏洞

Hikvision HikCentral Professional is a professional version of Hikvision's AI Cloud-based application management intelligence platform for edge domains. A security vulnerability exists in Hikvision HikCentral Professional versions V2.0.0 through V2.6.0, which is rooted in a susceptible SQL...

Hikvision HikCentral Master Lite 安全漏洞

Hikvision HikCentral Master Lite is an AI Cloud-based application management intelligence platform for the edge domain from Hikvision, China. A security vulnerability exists in Hikvision HikCentral Master Lite, which stems from a CSV injection vulnerability that could allow an attacker to build...

Hikvision HikCentral Master Lite 安全漏洞

Hikvision HikCentral Master Lite is an AI Cloud-based application management intelligence platform for edge domains from Hikvision, China. A security vulnerability exists in Hikvision HikCentral Master Lite, which stems from a cross-site scripting XSS vulnerability that allows an attacker to inje...

Hikvision IP Camera Cross Site Request Forgery

============================================================================================================================================= | Title : Hikvision IP Camera CSRF Add ADmin Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.2 64...

The vulnerability of the Message Handler component in Hikvision’s microprogrammed IP cameras DS-7604NI-K1/4P(B) allows a intruder to trigger a service failure.

The vulnerability of the Message Handler component in Hikvision’s DS-7604NI-K1/4PB microprogrammed software cameras is related to the handling of the zero pointer. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of Hikvision’s DS-2CD2432F-IW IP camera software, related to encryption deficiencies, allows intruders to exploit their privileges.

The vulnerability of Hikvision’s DS-2CD2432F-IW IP camera software relates to the use of a default SSID without encryption or Wi-Fi authentication. Exploiting this vulnerability could allow an attacker to gain increased privileges remotely...

Hikvision IP Camera Unauthenticated Password Change Via Improper Authentication Logic

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Hikvision IP Camera Unauthenticated Password Change Via Improper Authentication Logic', 'Description' = %q Many Hikvision IP cameras contain...

Hikvision IP Camera Information Disclosure

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Unauthenticated information disclosure such as configuration, credentials and camera snapshots of a vulnerable Hikvision IP Camera', 'Description...