EIP-2026-119675
PRE-CVEHikvision IP Camera versions 5.2.0 - 5.3.9 (Builds 140721 < 170109) - Access Control Bypass
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-119675. PoCs published by Matamorphosis.
AI-analyzed exploit summary This exploit leverages a backdoor in Hikvision IP Camera firmware versions 5.2.0 to 5.3.9 to reset user passwords by sending crafted XML requests to the Security/users endpoint with a hardcoded authentication key. It demonstrates an authentication bypass vulnerability (ICSA-17-124-01).
Description
Hikvision IP Camera versions 5.2.0 - 5.3.9 (Builds 140721 < 170109) - Access Control Bypass
Exploits (1)
This exploit leverages a backdoor in Hikvision IP Camera firmware versions 5.2.0 to 5.3.9 to reset user passwords by sending crafted XML requests to the Security/users endpoint with a hardcoded authentication key. It demonstrates an authentication bypass vulnerability (ICSA-17-124-01).