CVE-2024-29949
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.2epss 1.3%
exploitation probability
1.3%top 32% of all CVEs
observed exploitation
nono source reports it
There is a command injection vulnerability in some Hikvision NVRs. This could allow an authenticated user with administrative rights to execute arbitrary commands.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
Hikvision · DS-7604NI-K1 / 4P(B)Hikvision · DS-7604NI-M1/4PHikvision · DS-76xxNI-MxHikvision · DS-76xxNXI-IxHikvision · DS-77xxNI-MxHikvision · DS-77xxNXI-IxHikvision · DS-86xxNXI-IxHikvision · DS-96xxNXI-IxHikvision · DS-96xxxNI-MxxHikvision · iDS-76xxNXI-MxHikvision · iDS-77xxNXI-MxHikvision · iDS-96xxxMXI-Mxx