Description
Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data.
References (1)
Core 1
Scores
CVSS v3
7.5
EPSS
0.0025
EPSS Percentile
16.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-20
Status
published
Products (4)
Hikvision/DS-2CD Series
https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
Hikvision/DS-2DE Series
https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
Hikvision/DS-2DP Series
https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
Hikvision/DS-2TD Series
https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
Published
Jul 22, 2026
Tracked Since
Jul 22, 2026