Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

hikvision — Vulnerabilities & Security Advisories 45

Browse all 45 CVE security advisories affecting hikvision. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Hikvision is a leading manufacturer of video surveillance hardware and software solutions, providing critical infrastructure for security monitoring globally. The company’s extensive product portfolio has historically been associated with numerous security flaws, including thirty-six recorded Common Vulnerabilities and Exposures (CVEs). These vulnerabilities frequently involve remote code execution, cross-site scripting, and privilege escalation, often stemming from weak authentication mechanisms or unencrypted data transmission. A significant incident occurred in 2017 when researchers disclosed default credentials that allowed unauthorized access to camera feeds, raising substantial privacy and national security concerns. Consequently, several governments have restricted the use of its equipment in sensitive environments due to potential backdoors and data exfiltration risks. Despite these challenges, the firm continues to dominate the market, though its security posture remains a focal point for rigorous scrutiny and regulatory oversight within the cybersecurity community.

CVE ID Title CVSS Severity Published
CVE-2024-25063 Hikvision HikCentral Professional 安全漏洞 — HikCentral Professional 7.5 High 2024-03-02
CVE-2023-6895 Hikvision Intercom Broadcasting System ping.php os command injection — Intercom Broadcasting System CWE-78 6.3 Medium 2023-12-17
CVE-2023-6894 Hikvision Intercom Broadcasting System Log File system.html information disclosure — Intercom Broadcasting System CWE-200 4.3 Medium 2023-12-17
CVE-2023-6893 Hikvision Intercom Broadcasting System exportrecord.php path traversal — Intercom Broadcasting System CWE-22 4.3 Medium 2023-12-17
CVE-2023-28813 Hikvision Web Browser Plug-in LocalServiceComponents 安全漏洞 — LocalServiceComponents 8.1 High 2023-11-23
CVE-2023-28812 Hikvision Web Browser Plug-in LocalServiceComponents 安全漏洞 — LocalServiceComponents 9.1 Critical 2023-11-23
CVE-2023-28811 Hikvision NVR/DVR Devices 安全漏洞 — iDS-EXXHUH 7.4 High 2023-11-23
CVE-2023-28810 Hikvision Access Control 安全漏洞 — DS-K1T804AXX CWE-284 4.3 Medium 2023-06-15
CVE-2023-28809 Hikvision Access Control Products 授权问题漏洞 — DS-K1T804AXX CWE-284 7.5 High 2023-06-15
CVE-2023-28808 Hikvision Hybrid SAN/Cluster Storage products 安全漏洞 — DS-A71024/48/72R,DS-A80624S,DS-A81016S,DS-A72024/72R,DS-A80316S,DS-A82024D CWE-284 9.1 Critical 2023-04-11
CVE-2022-28173 Hikvision DS-3WF0AC-2NT和DS-3WF01C-2N/O 安全漏洞 — DS-3WF0AC-2NT CWE-284 9.1 Critical 2022-12-21
CVE-2022-28172 Hikvision Hybrid SAN/Cluster Storage 跨站脚本漏洞 — DS-A71024/48/72R,DS-A80624S,DS-A81016S,DS-A72024/72R,DS-A80316S,DS-A82024D CWE-79 6.5 Medium 2022-06-27
CVE-2022-28171 Hikvision Hybrid SAN/Cluster Storage 命令注入漏洞 — DS-A71024/48/72R,DS-A80624S,DS-A81016S,DS-A72024/72R,DS-A80316S,DS-A82024D CWE-78 7.5 High 2022-06-27
CVE-2018-6414 Hikvision IP摄像机缓冲区错误漏洞 — DS-2DE4xxxW,DS-2DE5xxxW,DS-2DE7xxxW 9.8 - 2018-08-13
CVE-2018-6413 Hikvision Camera DS-2CD9111-S 缓冲区错误漏洞 — DS-2CD9111-S 7.5 - 2018-04-18

This page lists every published CVE security advisory associated with hikvision. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.