Hikvision Vulnerabilities and Affected Products
Vulnerabilities associated with DS-7104HGHI-F1.
Products
Clear product- DS-2CD Series5 vulnerabilities
- HikCentral Professional5 vulnerabilities
- DS-2DE Series4 vulnerabilities
- DS-3WAP521-SI3 vulnerabilities
- DS-3WAP522-SI3 vulnerabilities
- DS-3WAP621E-SI3 vulnerabilities
- DS-3WAP622E-SI3 vulnerabilities
- DS-3WAP622G-SI3 vulnerabilities
- DS-3WAP623E-SI3 vulnerabilities
- DS-A71024/48/72R,DS-A80624S,DS-A81016S,DS-A72024/72R,DS-A80316S,DS-A82024D3 vulnerabilities
- DS-A71024/48R-CVS,DS-A72024/48R-CVS3 vulnerabilities
- DS-K1T341C3 vulnerabilities
- HikCentral Master Lite3 vulnerabilities
- Intercom Broadcasting System3 vulnerabilities
- CSMP (Comprehensive Security Management Platform) iSecure Center2 vulnerabilities
- CSMP iSecure Center2 vulnerabilities
- DS-7104HGHI-F12 vulnerabilities
- DS-7204HGHI-F12 vulnerabilities
- DS-7604NI-K1 / 4P(B)2 vulnerabilities
- DS-76xxNI-Mx2 vulnerabilities
- DS-77xxNI-Mx2 vulnerabilities
- DS-K1T320XXX2 vulnerabilities
- DS-K1T341AXX2 vulnerabilities
- DS-K1T343XXX2 vulnerabilities
- DS-K1T671XXX2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-66174MEDIUM | There is an improper authentication vulnerability in some Hikvision DVR products. Due to the improper implementation of authentication for the serial port, an attacker with physical access could exploit this vulnerability by connecting to the affected products and run a series of commands. CWE-287Dec 19, 2025 | CVSS6.5v3.1 | EPSS0.324% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-66173MEDIUM | There is a privilege escalation vulnerability in some Hikvision DVR products. Due to the improper implementation of authentication for the serial port, an attacker with physical access could exploit this vulnerability by connecting to the affected products and gaining access to an unrestricted shell environment. CWE-269Dec 19, 2025 | CVSS6.2v3.1 | EPSS0.196% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |