Read the docs

Hikvision

Records62All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical13CVSS 9.0–10.0
CVSS high26CVSS 7.0–8.9

Exploited now

Hikvision records in CISA KEV
TI-2017-05530 Hikvision Multiple Products Improper Authentication Vulnerability Priority CRITICAL 100KEV 2026-03-05TI-2021-14643 Hikvision Improper Input Validation Priority CRITICAL 100KEV 2022-01-10

Components

Products in the NVD configurations · select one to filter the records
Ds-2cd7153-e Firmware 3 records HIGH Ds-7204hghi-f1 Firmware 3 records LOW Ds-76xxx Series Firmware 3 records LOW Ds-77xxx Series Firmware 3 records LOW Ds-a71024 Firmware 3 records HIGH Ds-a71048 Firmware 3 records HIGH Ds-a71048r-cvs Firmware 3 records HIGH Ds-a71072r Firmware 3 records HIGH

Records

3 records in Ds-a71024 Firmware · all components

TI-2022-10969 CVE-2022-28171 · GHSA-pj6v-v769-6jfp

OS command injection in Hikvision…

Priority HIGH 74

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.51636 Published 2022-06-27 No fix listed CWE-78
TI-2023-13318 CVE-2023-28808 · GHSA-78m2-q358-37wh

Improper access control in Hikvision…

Priority MEDIUM 50

Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the admin permission.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00825 Published 2023-04-11 No fix listed CWE-284
TI-2022-10970 CVE-2022-28172 · GHSA-5h27-7cmr-gg9r

Cross-site scripting in Hikvision…

Priority LOW 30

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00802 Published 2022-06-27 No fix listed CWE-79
Open these records in search →