Hikvision Vulnerabilities and Affected Products
Vulnerabilities associated with DS-7604NI-K1 / 4P(B).
Products
Clear product- DS-2CD Series5 vulnerabilities
- HikCentral Professional5 vulnerabilities
- DS-2DE Series4 vulnerabilities
- DS-3WAP521-SI3 vulnerabilities
- DS-3WAP522-SI3 vulnerabilities
- DS-3WAP621E-SI3 vulnerabilities
- DS-3WAP622E-SI3 vulnerabilities
- DS-3WAP622G-SI3 vulnerabilities
- DS-3WAP623E-SI3 vulnerabilities
- DS-A71024/48/72R,DS-A80624S,DS-A81016S,DS-A72024/72R,DS-A80316S,DS-A82024D3 vulnerabilities
- DS-A71024/48R-CVS,DS-A72024/48R-CVS3 vulnerabilities
- DS-K1T341C3 vulnerabilities
- HikCentral Master Lite3 vulnerabilities
- Intercom Broadcasting System3 vulnerabilities
- CSMP (Comprehensive Security Management Platform) iSecure Center2 vulnerabilities
- CSMP iSecure Center2 vulnerabilities
- DS-7104HGHI-F12 vulnerabilities
- DS-7204HGHI-F12 vulnerabilities
- DS-7604NI-K1 / 4P(B)2 vulnerabilities
- DS-76xxNI-Mx2 vulnerabilities
- DS-77xxNI-Mx2 vulnerabilities
- DS-K1T320XXX2 vulnerabilities
- DS-K1T341AXX2 vulnerabilities
- DS-K1T343XXX2 vulnerabilities
- DS-K1T671XXX2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-29949HIGH | There is a command injection vulnerability in some Hikvision NVRs. This could allow an authenticated user with administrative rights to execute arbitrary commands. CWE-77Apr 2, 2024 | CVSS7.2v3.1 | EPSS1.32% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
There is a NULL dereference pointer vulnerability in some Hikvision NVRs. Due to an insufficient validation of a parameter in a message, an attacker may send specially crafted messages to an affected product, causing a process abnormality. CWE-476Apr 2, 2024 | CVSS2.7v3.1 | EPSS0.446% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |