Vendor
Hikvision
48 known vulnerabilities.
Hikvision at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 3 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 6 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 3 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 3 | 0 |
| Dec 2025 | 2 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 4 | 2 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 3 | 0 |
| Jul 2025 | 1 | 1 |
| Jun 2025 | 1 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Most common weaknesses
Products
DS-2CD Series 5
HikCentral Professional 5
DS-2DE Series 4
DS-A71024/48/72R,DS-A80624S,DS-A81016S,DS-A72024/72R,DS-A80316S,DS-A82024D 3
DS-A71024/48R-CVS,DS-A72024/48R-CVS 3
HikCentral Master Lite 3
Intercom Broadcasting System 3
DS-K1T341C 3
DS-3WAP521-SI 3
DS-3WAP522-SI 3
DS-3WAP621E-SI 3
DS-3WAP622E-SI 3
DS-3WAP623E-SI 3
DS-3WAP622G-SI 3
DS-7104HGHI-F1 2
DS-7204HGHI-F1 2
LocalServiceComponents 2
DS-K1T804AXX 2
DS-K1T341AXX 2
DS-K1T671XXX 2
DS-K1T343XXX 2
DS-K1T320XXX 2
DS-7604NI-K1 / 4P(B) 2
CSMP iSecure Center 2
iSecure Center 2
DS-76xxNI-Mx 2
DS-77xxNI-Mx 2
HL-DVR-2XXQ-M(C) 1
DS-76xxNXI-Ix/S 1
Integrated Security Management Platform 1
HL-DVR-2XXQ-M(E) 1
DS-77xxNXI-Ix/S 1
HW-HWD-61XXMH-G4 1
DS-86xxNXI-Ix/S 1
HW-HWD-61XXMH-G4(E) 1
DS-96xxNXI-Ix/S 1
iDS-71xxHUH-M(C) 1
DS-76xxNXI-Ix/VPro 1
iDS-72xxHUH-M/E(C) 1
DS-77xxNXI-Ix/VPro 1
Latest advisories
-
High max 7.5ICSA-23-285-14 2 CVEs
Hikvision Access Control and Intercom Products
Successful exploitation of these vulnerabilities could result in an attacker hijacking a session and gaining device operation permissions, or result in an attacker modifying device network configuration by sending specific data packets to a vulnerable interfa…
-
Critical max 9.8
Hikvision Cameras
ATTENTION: Remotely exploitable/low skill level to exploit.
48 results · Feed
-
Medium 4.3
Some Wi-Fi series camera products have insufficient permission validation on certain interfaces, allowing authenticated…
-
High 7.1
There is an Vulnerability in some HikCentral Access Control versions. Authenticated low-privilege users can invoke API …
-
Medium 6.1
Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or phys…
-
High 7.2
Some Hikvision Networking Products are vulnerable to authenticated command execution due to insufficient input validati…
-
Medium 5.3
There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain…
-
High 7.2
There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers…
-
High 7.7
There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to c…
-
High 7.5
Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers …
-
Medium 6.6
There is a privilege escalation vulnerability in some Hikvision cameras. Due to incorrect permission allocation in the …
-
Low 2.9
The application does not impose strict enough restrictions on directory access permissions, posing a risk that other ma…
-
High 7.2
Some Hikvision switch products (discontinued since December 2023) are vulnerable to authenticated remote command execut…
-
Medium 6.8
There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated …
-
High 7.2CVE-2026-0709 Public exploit
Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input valid…
-
High 8.8CVE-2025-66177 Public exploit
There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models…
-
High 8.8
There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Product…
-
Medium 6.5
There is an improper authentication vulnerability in some Hikvision DVR products. Due to the improper implementation of…
-
Medium 6.2
There is a privilege escalation vulnerability in some Hikvision DVR products. Due to the improper implementation of aut…
-
High 8.3
Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2023-06-25 allows file upload via /c…
-
High 8.3CVE-2024-58274 EPSS 17%
Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2024-08-01 allows execution of a com…
-
Critical 9.8
Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation, resulting in a command i…
-
Critical 9.8
Some versions of Hikvision's iSecure Center Product have an improper file upload control vulnerability. Due to the impr…
-
High 8.6CVE-2025-39247 Public exploit
There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated …
-
Medium 5.3
There is an Unquoted Service Path Vulnerability in some HikCentral FocSign versions. This could allow an authenticated …
-
Medium 4.7
There is a CSV Injection Vulnerability in some HikCentral Master Lite versions. This could allow an attacker to inject …
-
Critical 10.0CVE-2025-34067 EPSS 22%
Hikvision Integrated Security Management Platform Remote Command Execution via applyCT Fastjson
An unauthenticated remote command execution vulnerability exists in the applyCT component of the Hikvision Integrated Security Management Platform due to the use of a vulnerable version of the Fastjson library. The endpoint /bic/ssoService/v1/applyCT deserial…
-
High 7.2
Some Hikvision Wireless Access Point are vulnerable to authenticated remote command execution due to insufficient input…
-
Low 2.1
There is an XSS vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could inject scripts i…
-
High 7.2
There is a SQL injection vulnerability in some HikCentral Professional versions. This could allow an authenticated user…
-
Medium 5.5
There is a CSV injection vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could build m…
-
High 7.2
There is a command injection vulnerability in some Hikvision NVRs. This could allow an authenticated user with administ…
-
Low 3.8
There is an out-of-bounds read vulnerability in some Hikvision NVRs. An authenticated attacker could exploit this vulne…
-
Low 2.7
There is a NULL dereference pointer vulnerability in some Hikvision NVRs. Due to an insufficient validation of a parame…
-
Medium 4.3
Due to insufficient server-side validation, an attacker with login privileges could access certain resources that the a…
-
High 7.5
Due to insufficient server-side validation, a successful exploit of this vulnerability could allow an attacker to gain …
-
Medium 6.3
Hikvision Intercom Broadcasting System ping.php os command injection
A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK). It has been declared as critical. This vulnerability affects unknown code of the file /php/ping.php. The manipulation of the argument jsondata[ip] with the input …
-
Medium 4.3
Hikvision Intercom Broadcasting System Log File system.html information disclosure
A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK). It has been classified as problematic. This affects an unknown part of the file access/html/system.html of the component Log File Handler. The manipulation leads …
-
Medium 4.3CVE-2023-6893 EPSS 70%
Hikvision Intercom Broadcasting System exportrecord.php path traversal
A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK) and classified as problematic. Affected by this issue is some unknown functionality of the file /php/exportrecord.php. The manipulation of the argument downname wi…
-
High 8.1
An attacker could exploit a vulnerability by sending crafted messages to computers installed with this plug-in to modif…
-
Critical 9.1
There is a buffer overflow vulnerability in a web browser plug-in could allow an attacker to exploit the vulnerability …
-
High 7.4
There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If exploited, an attacker on t…