CVE-2024-29949 Vulnerability Details

Record summary

CVE-2024-29949 has a selected CVSS score of 7.2 (high).

Description

There is a command injection vulnerability in some Hikvision NVRs. This could allow an authenticated user with administrative rights to execute arbitrary commands.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone

AutomatableNo

Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 2, 2024 · Source: CVE List

Affected products and versions

Showing 12 of 16

Product	Source	Version range	Status
ds-7604ni-k1\/4p\(b\) Browse Hikvision / DS-7604NI-K1 / 4P(B) Default status: unknown	CVE List	V4.30.096build221220 and the versions prior to it	affected
	CVE List	Through V4.30.096build221220	affected
ds-7604ni-m1\/4p Browse Hikvision / DS-7604NI-M1/4P Default status: unknown	CVE List	Versions after V5.00.000 (including V5.00.000) and before V5.01.070（not including V5.01.070）	affected
	CVE List	5.00.000 to < 5.01.070	affected
DS-76xxNI-Mx Browse Hikvision / DS-76xxNI-Mx Default status: unknown	CVE List	Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）	affected
	CVE List	V5.00.000 to < V5.02.006	affected
DS-76xxNXI-Ix Browse Hikvision / DS-76xxNXI-Ix	CVE List	Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）	affected
DS-77xxNI-Mx Browse Hikvision / DS-77xxNI-Mx Default status: affected, unknown	CVE List	Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）	affected
	CVE List	5.00.000 to < 5.02.006	affected
DS-77xxNXI-Ix Browse Hikvision / DS-77xxNXI-Ix	CVE List	Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）	affected
DS-86xxNXI-Ix Browse Hikvision / DS-86xxNXI-Ix	CVE List	Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）	affected
DS-96xxNXI-Ix Browse Hikvision / DS-96xxNXI-Ix	CVE List	Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）	affected
DS-96xxxNI-Mxx Browse Hikvision / DS-96xxxNI-Mxx Default status: unknown	CVE List	Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）	affected
	CVE List	5.00.000 to < 5.02.006	affected
iDS-76xxNXI-Mx Browse Hikvision / iDS-76xxNXI-Mx Default status: unknown	CVE List	Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）	affected
	CVE List	5.00.000 to < 5.02.006	affected
iDS-77xxNXI-Mx Browse Hikvision / iDS-77xxNXI-Mx Default status: unknown	CVE List	Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）	affected
	CVE List	5.00.000 to < 5.02.006	affected
iDS-96xxxMXI-Mxx Browse Hikvision / iDS-96xxxMXI-Mxx Default status: unknown	CVE List	Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）	affected
	CVE List	5.00.000 to < 5.02.006	affected

References

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2024-29949

hikvision.com

https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-hikvision-nvr-devices

CVE-2024-29949

Record summary

Description

Exploitation context

CISA SSVC decision

Affected products and versions

ds-7604ni-k1\/4p\(b\)

ds-7604ni-m1\/4p

DS-76xxNI-Mx

DS-76xxNXI-Ix

DS-77xxNI-Mx

DS-77xxNXI-Ix

DS-86xxNXI-Ix

DS-96xxNXI-Ix

DS-96xxxNI-Mxx

iDS-76xxNXI-Mx

iDS-77xxNXI-Mx

iDS-96xxxMXI-Mxx

References