Vulnerabilities in Hikvision
45 resultsVexday analysis
A Hikvision apresenta 31 vulnerabilidades catalogadas, com 4 classificadas como críticas, mas nenhuma sob exploração ativa conhecida no momento. A fraqueza dominante é injeção de comando (CWE-78), típica de produtos de vigilância, com 3 novos registros nos últimos 90 dias indicando atividade de descoberta contínua. O risco permanece moderado dado a ausência de ataques confirmados, embora a natureza crítica de algumas falhas e o perfil de produto (câmeras e NVRs) justifiquem monitoramento prioritário.
CVE-2026-61390HIGHThere is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfunctiEPSS 0.2%CVE-2026-57599MEDIUMThere is a privilege escalation vulnerability in some Hikvision cameras. Due to incorrect permission allocation in the device program, attacEPSS 0.2%CVE-2026-61392MEDIUMThere is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain partial information EPSS 0.2%CVE-2025-66173MEDIUMThere is a privilege escalation vulnerability in some Hikvision DVR products. Due to the improper implementation of authentication for the sEPSS 0.2%CVE-2026-32684LOWThe application does not impose strict enough restrictions on directory access permissions, posing a risk that other malicious applications EPSS 0.1%