CVE-2021-36260

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands. Recent assessments: Assessed Attacker Value: 0...

PT-2021-4746

Name of the Vulnerable Software and Affected Versions Hikvision products affected versions not specified Description A command injection issue exists in the web server of certain Hikvision products due to insufficient input validation. A remote attacker can exploit this by sending specially craft...

Hikvision IP Camera Unauthenticated Command Injection

This module exploits an unauthenticated command injection in a variety of Hikvision IP cameras CVE-2021-36260. The module inserts a command into an XML payload used with an HTTP PUT request sent to the /SDK/webLanguage endpoint, resulting in command execution as the root user. This module...

Information Disclosure Vulnerability in Streaming Media Management Server of Hangzhou Hikvision Digital Technology Co.

Hangzhou Hikvision Digital Technology Co., Ltd. is a video-centered Internet of Things solution provider, offering integrated security, smart business and big data services. An information leakage vulnerability exists in the streaming media management server of Hangzhou Hikvision Digital Technolo...

Unauthorized Access Vulnerability in Hikvision Networking Gateway

Hangzhou Hikvision Digital Technology Co., Ltd. is a video-centered intelligent IoT solution and big data service provider. An unauthorized access vulnerability exists in the Hikvision networking gateway, which can be exploited by attackers to obtain sensitive information...

Logic Flaw Vulnerability in Hikvision Networking Gateway

Hangzhou Hikvision Digital Technology Co., Ltd. is a video-centered Internet of Things solution provider, offering integrated security, smart business and big data services. A logic flaw vulnerability exists in the Hikvision networking gateway, which can be exploited by attackers to obtain...

Information leakage vulnerability in backup management server of Hangzhou Hikvision Digital Technology Co.

Hangzhou Hikvision System Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. An information leakage vulnerability exists in the backup management server of Hangzhou Hikvision Digital Technology Company Limited, which can be exploited by...

Weak Password Vulnerability in Hikvision Backup Management Server

Hikvision is a provider of video-centric intelligent IoT solutions and big data services. A weak password vulnerability exists in Hikvision's backup management server, which can be exploited by attackers to obtain sensitive information...

Directory Traversal Vulnerability in Backup Management Server of Hangzhou Hikvision Digital Technology Co.

Hikvision is a provider of video-centric intelligent IoT solutions and big data services. A directory traversal vulnerability exists in the backup management server of Hangzhou Hikvision Digital Technology Co. Ltd. that can be exploited by attackers to obtain sensitive information...

Information Disclosure Vulnerability in HIKVISION Networking Gateway

Hangzhou Hikvision System Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. An information leakage vulnerability exists in the HIKVISION networking gateway, which can be exploited by attackers to obtain sensitive information...

Weak password vulnerability in IVMS-8201E-NCG at Hangzhou Hikvision Digital Technology Co.

IVMS-8201E-NCG is a telecom-grade networking gateway device integrating signaling gateway service, media gateway service, security authentication, rights management, log management and network management functions, which can realize cascading and interconnection between video surveillance platfor...

SQL Injection Vulnerability in Networking Gateway of Hangzhou Hikvision Digital Technology Co.

Hangzhou Hikvision Digital Technology Co., Ltd. is a video-centered Internet of Things solution provider, offering integrated security, smart business and big data services. A SQL injection vulnerability exists in the networking gateway of Hangzhou Hikvision Digital Technology Co. Ltd, which can ...

Weak password vulnerability in DS-SAG200 of Hangzhou Hikvision System Technology Co.

Hangzhou Hikvision System Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A weak password vulnerability exists in the DS-SAG200 of Hangzhou Hikvision System Technology Co. that can be exploited by attackers to obtain sensitive information...

Arbitrary File Download Vulnerability in Hikvision Secure Access Gateway

Hangzhou Hikvision Digital Technology Co., Ltd. is a leading provider of security products and industry solutions. An arbitrary file download vulnerability exists in the Hikvision Security Access Gateway. An attacker can exploit this vulnerability to obtain sensitive information...

Weak password vulnerability in Hikvision security access gateway

Hangzhou Hikvision Digital Technology Co., Ltd. is a leading provider of security products and industry solutions. A weak password vulnerability exists in the Hikvision security access gateway. An attacker can utilize the vulnerability to log into the backend and obtain sensitive information...

Logic Flaw Vulnerability in Streaming Media Management Server at Hangzhou Hikvision Digital Technology Co.

Hikvision is a provider of video-centric intelligent IoT solutions and big data services. A logic flaw vulnerability exists in the streaming media management server of Hangzhou Hikvision Digital Technology Co. that can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in H2 Console at Hangzhou Hikvision Digital Technology Co.

Hangzhou Hikvision Digital Technology Co., Ltd. is a video-centered Internet of Things solution provider, offering integrated security, smart business and big data services. A command execution vulnerability exists in the H2 console of Hangzhou Hikvision Digital Technology Co. Ltd, which can be...

Unauthorized Access Vulnerability in Hikvision DS-2CD2612F-IS

The DS-2CD2612F-IS is a network camera. An unauthorized access vulnerability exists in the Hikvision DS-2CD2612F-IS. An attacker can exploit the vulnerability to obtain sensitive information...

Weak Password Vulnerability in Image Server of Hangzhou Hikvision System Technology Co.

Hangzhou Hikvision System Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A weak password vulnerability exists in the image server of Hangzhou Hikvision System Technology Co. Ltd, which can be exploited by attackers to obtain sensitive...

Weak password vulnerability in group intercom service configuration platform of Hangzhou Hikvision System Technology Co.

Hangzhou Hikvision System Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A weak password vulnerability exists in the Group Intercom Service Configuration Platform of Hangzhou Hikvision System Technology Company Limited, which can be...