Hikvision vulnerabilities
48 CVEs and advisories name Hikvision as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-29948There is an out-of-bounds read vulnerability in some Hikvision NVRs.
- CVE-2024-29947There is a NULL dereference pointer vulnerability in some Hikvision NVRs.
- CVE-2024-25064Due to insufficient server-side validation, an attacker with login privileges could access certain resources that the attacker should not ha
- CVE-2024-25063Due to insufficient server-side validation, a successful exploit of this vulnerability could allow an attacker to gain access to certain URL
- CVE-2023-6895Hikvision Intercom Broadcasting System ping.php os command injection
- CVE-2023-6894Hikvision Intercom Broadcasting System Log File system.html information disclosure
- CVE-2023-6893Hikvision Intercom Broadcasting System exportrecord.php path traversal
- CVE-2023-28813An attacker could exploit a vulnerability by sending crafted messages to computers installed with this plug-in to modify plug-in parameters,
- CVE-2023-28812There is a buffer overflow vulnerability in a web browser plug-in could allow an attacker to exploit the vulnerability by sending crafted me
- CVE-2023-28811There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models.
- CVE-2023-28810Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities.
- CVE-2023-28809Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user su
- CVE-2023-28808Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the admin permission.
- CVE-2022-28173The web server of some Hikvision wireless bridge products have an access control vulnerability which can be used to obtain the admin permiss
- CVE-2022-28172The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability.
- CVE-2022-28171The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability.
- CVE-2018-6414A buffer overflow vulnerability in the web server of some Hikvision IP Cameras allows an attacker to send a specially crafted message to aff
- CVE-2018-6413There is a buffer overflow in the Hikvision Camera DS-2CD9111-S of V4.1.2 build 160203 and before, and this vulnerability allows remote atta