Hikvision IP Cameras Missing Encryption of Sensitive Data (CVE-2017-14953)

HikVision Wi-Fi IP cameras, when used in a wired configuration, allow physically proximate attackers to trigger association with an arbitrary access point by leveraging a default SSID with no WiFi encryption or authentication. NOTE: Vendor states that this is not a vulnerability, but more an...

CVE-2017-14953

CVE-2017-14953 affects Hikvision Wi‑Fi IP cameras (example: DS-2CD2432F-IW) used in wired configurations. The vulnerability arises from a default unencrypted, unauthenticated SSID (e.g., “davinci”) enabling physically proximate attackers to force association with an arbitrary access point, potent...