Vendor
Hikvision
48 known vulnerabilities.
Products
16 results · Clear filters · Feed
-
Medium 4.3
Some Wi-Fi series camera products have insufficient permission validation on certain interfaces, allowing authenticated…
-
Medium 6.1
Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or phys…
-
Medium 5.3
There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain…
-
Medium 6.6
There is a privilege escalation vulnerability in some Hikvision cameras. Due to incorrect permission allocation in the …
-
Medium 6.8
There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated …
-
Medium 6.5
There is an improper authentication vulnerability in some Hikvision DVR products. Due to the improper implementation of…
-
Medium 6.2
There is a privilege escalation vulnerability in some Hikvision DVR products. Due to the improper implementation of aut…
-
Medium 5.3
There is an Unquoted Service Path Vulnerability in some HikCentral FocSign versions. This could allow an authenticated …
-
Medium 4.7
There is a CSV Injection Vulnerability in some HikCentral Master Lite versions. This could allow an attacker to inject …
-
Medium 5.5
There is a CSV injection vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could build m…
-
Medium 4.3
Due to insufficient server-side validation, an attacker with login privileges could access certain resources that the a…
-
Medium 6.3
Hikvision Intercom Broadcasting System ping.php os command injection
A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK). It has been declared as critical. This vulnerability affects unknown code of the file /php/ping.php. The manipulation of the argument jsondata[ip] with the input …
-
Medium 4.3
Hikvision Intercom Broadcasting System Log File system.html information disclosure
A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK). It has been classified as problematic. This affects an unknown part of the file access/html/system.html of the component Log File Handler. The manipulation leads …
-
Medium 4.3CVE-2023-6893 EPSS 70%
Hikvision Intercom Broadcasting System exportrecord.php path traversal
A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK) and classified as problematic. Affected by this issue is some unknown functionality of the file /php/exportrecord.php. The manipulation of the argument downname wi…
-
Medium 4.3
Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities. A…
-
Medium 6.5
The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to …