CVE-2020-7057

Hikvision DVR DS-7204HGHI-F1 V4.0.1 build 180903 Web Version sends a different response for failed ISAPI/Security/sessionLogin/capabilities login attempts depending on whether the user account exists, which might make it easier to enumerate users. However, only about 4 or 5 failed logins are...

Design/Logic Flaw

Hikvision DVR DS-7204HGHI-F1 V4.0.1 build 180903 Web Version sends a different response for failed ISAPI/Security/sessionLogin/capabilities login attempts depending on whether the user account exists, which might make it easier to enumerate users. However, only about 4 or 5 failed logins are...

CVE-2020-7057

Hikvision DVR DS-7204HGHI-F1 V4.0.1 build 180903 Web Version sends a different response for failed ISAPI/Security/sessionLogin/capabilities login attempts depending on whether the user account exists, which might make it easier to enumerate users. However, only about 4 or 5 failed logins are...

CVE-2020-7057

CVE-2020-7057 affects Hikvision DVR DS-7204HGHI-F1 running V4.0.1 build 180903 web interface. The login endpoint ISAPI/Security/sessionLogin/capabilities returns different responses for failed login attempts based on whether the username exists, enabling user enumeration. The description states o...

CVE-2020-7057

Hikvision DVR DS-7204HGHI-F1 V4.0.1 build 180903 Web Version sends a different response for failed ISAPI/Security/sessionLogin/capabilities login attempts depending on whether the user account exists, which might make it easier to enumerate users. However, only about 4 or 5 failed logins are...

PT-2020-19363

Name of the Vulnerable Software and Affected Versions Hikvision DVR DS-7204HGHI-F1 version 4.0.1 build 180903 Description The issue allows an attacker to potentially enumerate user accounts by analyzing the different responses received for failed login attempts to the...

CVE-2020-7057: Improper Restriction of Excessive Authentication Attempts

Hikvision DVR DS-7204HGHI-F1 V4.0.1 build 180903 Web Version sends a different response for failed ISAPI/Security/sessionLogin/capabilities login attempts depending on whether the user account exists, which might make it easier to enumerate users. However, only about 4 or 5 failed logins are...

CVE-2013-4975

Hikvision DS-2CD7153-E IP Camera has Privilege Escalation...

CVE-2013-4976

Hikvision DS-2CD7153-E IP Camera has security bypass via hardcoded credentials...

Privilege escalation

Hikvision DS-2CD7153-E IP Camera has Privilege Escalation...

Hardcoded credentials

Hikvision DS-2CD7153-E IP Camera has security bypass via hardcoded credentials...

CVE-2013-4976

Hikvision DS-2CD7153-E IP Camera has security bypass via hardcoded credentials...

CVE-2013-4976

CVE-2013-4976 affects Hikvision DS-2CD7153-E IP Cameras, enabling security bypass via hardcoded credentials (remote authentication bypass). The NVD entry lists high/severe impact with CVSS v3.1 base score 9.8 (NETWORK, NONE prerequisites, US S) and CVSS v2 base score 7.5, indicating critical risk...

CVE-2013-4975

Hikvision DS-2CD7153-E IP Camera has Privilege Escalation...

CVE-2013-4975

CVE-2013-4975 concerns Hikvision DS-2CD7153-E IP Camera with firmware v4.1.0 b130111 and related devices. The Core Security/CoreLabs advisory documents three vulnerabilities affecting this family: (1) CVE-2013-4975 — privilege escalation via configuration data retrieval and weak encryption to obt...

CVE-2013-4976: Improper Authentication

Hikvision DS-2CD7153-E IP Camera has security bypass via hardcoded credentials...

PT-2019-6981

Name of the Vulnerable Software and Affected Versions Hikvision DS-2CD7153-E IP Camera affected versions not specified Description The issue concerns a privilege escalation problem. There is no information provided about the estimated number of potentially affected devices worldwide or details...

PT-2019-6982

Name of the Vulnerable Software and Affected Versions Hikvision DS-2CD7153-E IP Camera affected versions not specified Description The issue concerns a security bypass due to hardcoded credentials in the Hikvision DS-2CD7153-E IP Camera. Recommendations At the moment, there is no information abou...

CVE-2013-4975: Improper Privilege Management

Hikvision DS-2CD7153-E IP Camera has Privilege Escalation...

Unauthorized Access Vulnerability in Hikvision Backup Management Server

Hikvision is a video-centric IoT solution provider, offering integrated security, smart business and big data services. An unauthorized access vulnerability exists in the Hikvision Backup Management Server, which can be exploited by an attacker to gain unauthorized access to the system...