Vulnerability index

Browse CVEs

34 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Ds K1t331 Firmware HIGH 8.8
CVE-2025-66176

There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker o…

Fix: 3.7.80+
Fix from $1,950 2026-01-13
Ds 7104hghi F1 Firmware MEDIUM 6.8
CVE-2025-66174

There is an improper authentication vulnerability in some Hikvision DVR products. Due to the improper implementation of authentication for the serial…

Fix: after 4.30.122_201107
Fix from $1,600 2025-12-19
Ds 7104hghi F1 Firmware MEDIUM 6.2
CVE-2025-66173

There is a privilege escalation vulnerability in some Hikvision DVR products. Due to the improper implementation of authentication for the serial por…

Fix: after 4.30.122_201107
Fix from $1,600 2025-12-19
Hikcentral Master CRITICAL 9.8
CVE-2024-47485

There is a CSV injection vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could build malicious data to generate exec…

Fix: 2.3.0+
Fix from $2,300 2024-10-18
Hikcentral Professional HIGH 8.8
CVE-2024-47487

There is a SQL injection vulnerability in some HikCentral Professional versions. This could allow an authenticated user to execute arbitrary SQL quer…

Fix: 2.6.1+
Fix from $1,950 2024-10-18
Hikcentral Master MEDIUM 6.1
CVE-2024-47486

There is an XSS vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could inject scripts into certain pages by building …

Fix: 2.3.0+
Fix from $1,600 2024-10-18
Ds D5b86rb\/b Firmware HIGH 7.8
CVE-2023-33806

Insecure default configurations in Hikvision Interactive Tablet DS-D5B86RB/B V2.3.0 build220119, allows attackers to execute arbitrary commands.

Mitigation only
Fix from $1,950 2024-04-15
Hikcentral Professional HIGH 7.5
CVE-2024-25063

Due to insufficient server-side validation, a successful exploit of this vulnerability could allow an attacker to gain access to certain URLs that th…

Fix: after 2.5.1
Fix from $1,950 2024-03-02
Intercom Broadcast System CRITICAL 9.8
CVE-2023-6895EPSS 89%

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK). It has been declared as critical. This vulnerability…

Fix: 4.1.0+
Fix from $2,300 2023-12-17
Intercom Broadcast System MEDIUM 6.5
CVE-2023-6894

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK). It has been classified as problematic. This affects …

Fix: 4.1.0+
Fix from $1,600 2023-12-17
Intercom Broadcast System HIGH 7.5
CVE-2023-6893EPSS 70%

A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK) and classified as problematic. Affected by this issue…

Fix: 4.1.0+
Fix from $1,950 2023-12-17
Localservicecomponents HIGH 7.5
CVE-2023-28813

An attacker could exploit a vulnerability by sending crafted messages to computers installed with this plug-in to modify plug-in parameters, which co…

Fix: after 1.0.0.78
Fix from $1,950 2023-11-23
Localservicecomponents CRITICAL 9.8
CVE-2023-28812

There is a buffer overflow vulnerability in a web browser plug-in could allow an attacker to exploit the vulnerability by sending crafted messages to…

Fix: after 1.0.0.78
Fix from $2,300 2023-11-23
Nvr 216mh C\(d\) Firmware MEDIUM 6.5
CVE-2023-28811

There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on the same local area network (LA…

Fix: 4.1.60+
Fix from $1,600 2023-11-23
Ds K1t320efwx Firmware HIGH 7.5
CVE-2023-28809

Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfull…

No fix yet
Fix from $1,950 2023-06-15
Ds A71024 Firmware CRITICAL 9.8
CVE-2023-28808

Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the admin permission. The attacke…

Fix: after 2.3.8-8
Fix from $2,300 2023-04-11
Ds 3wf0ac 2nt Firmware CRITICAL 9.8
CVE-2022-28173

The web server of some Hikvision wireless bridge products have an access control vulnerability which can be used to obtain the admin permission. The …

Fix: 1.0.4 / 1.1.0+
Fix from $2,300 2022-12-19
Ds A71024 Firmware CRITICAL 9.8
CVE-2022-28171EPSS 50%

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validat…

Fix: after 2.3.8-6
Fix from $2,300 2022-06-27
Ds A71024 Firmware MEDIUM 6.1
CVE-2022-28172

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validat…

Fix: after 2.3.8-6
Fix from $1,600 2022-06-27
Ds 2cd2026g2 Iu\/sl Firmware CRITICAL 9.8
CVE-2021-36260 KEVEPSS 100%

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vul…

Mitigation only
Fix from $2,300 2021-09-22
Ds 7204hghi F1 Firmware MEDIUM 5.3
CVE-2020-7057

Hikvision DVR DS-7204HGHI-F1 V4.0.1 build 180903 Web Version sends a different response for failed ISAPI/Security/sessionLogin/capabilities login att…

No fix yet
Fix from $1,600 2020-01-14
Ds 2cd7153 E Firmware CRITICAL 9.8
CVE-2013-4976EPSS 36%

Hikvision DS-2CD7153-E IP Camera has security bypass via hardcoded credentials

No fix yet
Fix from $2,300 2019-12-27
Ds 2cd7153 E Firmware HIGH 8.8
CVE-2013-4975EPSS 12%

Hikvision DS-2CD7153-E IP Camera has Privilege Escalation

No fix yet
Fix from $1,950 2019-12-27
Ip Cameras CRITICAL 9.8
CVE-2018-6414

A buffer overflow vulnerability in the web server of some Hikvision IP Cameras allows an attacker to send a specially crafted message to affected dev…

Mitigation only
Fix from $2,300 2018-08-13
Ds 2cd9111 S Firmware HIGH 7.5
CVE-2018-6413

There is a buffer overflow in the Hikvision Camera DS-2CD9111-S of V4.1.2 build 160203 and before, and this vulnerability allows remote attackers to …

Fix: after 4.1.2
Fix from $1,950 2018-04-18
Ds 2cd2432f Iw Firmware MEDIUM 6.5
CVE-2017-14953

HikVision Wi-Fi IP cameras, when used in a wired configuration, allow physically proximate attackers to trigger association with an arbitrary access …

Fix: 5.4.5+
Fix from $1,600 2017-12-01
Ivms 4200 HIGH 7.8
CVE-2017-13774

Hikvision iVMS-4200 devices before v2.6.2.7 allow local users to generate password-recovery codes via unspecified vectors.

Fix: after 2.6.2.6
Fix from $1,950 2017-08-30
Ds 2cd2032 I Firmware CRITICAL 9.8
CVE-2017-7921 KEVEPSS 100%

An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5…

Patch available
Fix from $2,300 2017-05-06
Ds 2cd2032 I Firmware HIGH 8.8
CVE-2017-7923

A Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Ser…

Patch available
Fix from $1,950 2017-05-06
Ds 76xxx Series Firmware MEDIUM 6.5
CVE-2015-4407

Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service…

Fix: after 3.3.4
Fix from $1,600 2017-03-13