Refine your search
5 vulnerabilities found for DS-2CD Series by Hikvision
CVE-2026-61392 (GCVE-0-2026-61392)
Vulnerability from cvelistv5
Published
2026-07-22 11:03
Modified
2026-07-22 12:29
Severity ?
VLAI Severity ?
EPSS score ?
Summary
There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain partial information from the device’s memory.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Hikvision | DS-2CD Series |
Version: https://www.hikvision.com/en/support/download/firmware/security-firmware-download/ |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-61392",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-22T12:27:07.318701Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T12:29:21.886Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DS-2CD Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
},
{
"product": "DS-2DE Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Daniel Kaye of Inversus Labs"
}
],
"descriptions": [
{
"lang": "en",
"value": "There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain partial information from the device\u2019s memory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T11:03:11.533Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-cameras/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2026-61392",
"datePublished": "2026-07-22T11:03:11.533Z",
"dateReserved": "2026-07-09T05:51:16.531Z",
"dateUpdated": "2026-07-22T12:29:21.886Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-61391 (GCVE-0-2026-61391)
Vulnerability from cvelistv5
Published
2026-07-22 11:02
Modified
2026-07-22 12:31
Severity ?
VLAI Severity ?
EPSS score ?
Summary
There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers to cause device malfunction by sending specially crafted packets.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Hikvision | DS-2CD Series |
Version: https://www.hikvision.com/en/support/download/firmware/security-firmware-download/ |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-61391",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-22T12:30:41.711706Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "CWE-121 Stack-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T12:31:18.388Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DS-2CD Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
},
{
"product": "DS-2DE Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Daniel Kaye of Inversus Labs"
}
],
"descriptions": [
{
"lang": "en",
"value": "There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers to cause device malfunction by sending specially crafted packets."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T11:02:27.332Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-cameras/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2026-61391",
"datePublished": "2026-07-22T11:02:27.332Z",
"dateReserved": "2026-07-09T05:51:16.531Z",
"dateUpdated": "2026-07-22T12:31:18.388Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-61390 (GCVE-0-2026-61390)
Vulnerability from cvelistv5
Published
2026-07-22 11:02
Modified
2026-07-22 12:34
Severity ?
VLAI Severity ?
EPSS score ?
Summary
There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfunction by sending specially crafted packets.
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Hikvision | DS-2CD Series |
Version: https://www.hikvision.com/en/support/download/firmware/security-firmware-download/ |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-61390",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-22T12:32:13.576488Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "CWE-122 Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T12:34:30.832Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DS-2CD Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
},
{
"product": "DS-2DE Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Daniel Kaye of Inversus Labs"
}
],
"descriptions": [
{
"lang": "en",
"value": "There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfunction by sending specially crafted packets."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T11:02:00.804Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-cameras/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2026-61390",
"datePublished": "2026-07-22T11:02:00.804Z",
"dateReserved": "2026-07-09T05:51:16.530Z",
"dateUpdated": "2026-07-22T12:34:30.832Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-57600 (GCVE-0-2026-57600)
Vulnerability from cvelistv5
Published
2026-07-22 11:01
Modified
2026-07-22 12:35
Severity ?
VLAI Severity ?
EPSS score ?
Summary
Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data.
References
Impacted products
| Vendor | Product | Version | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Hikvision | DS-2CD Series |
Version: https://www.hikvision.com/en/support/download/firmware/security-firmware-download/ |
|||||||||||||||||
|
|||||||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-57600",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-22T12:34:49.066951Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-20",
"description": "CWE-20 Improper Input Validation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T12:35:10.527Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DS-2CD Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
},
{
"product": "DS-2DE Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
},
{
"product": "DS-2DP Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
},
{
"product": "DS-2TD Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Bitdefender IoT Security Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T11:01:36.269Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-cameras/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2026-57600",
"datePublished": "2026-07-22T11:01:36.269Z",
"dateReserved": "2026-06-25T02:07:05.126Z",
"dateUpdated": "2026-07-22T12:35:10.527Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-57599 (GCVE-0-2026-57599)
Vulnerability from cvelistv5
Published
2026-07-22 11:00
Modified
2026-07-22 12:44
Severity ?
VLAI Severity ?
EPSS score ?
Summary
There is a privilege escalation vulnerability in some Hikvision cameras. Due to incorrect permission allocation in the device program, attackers can escalate privileges and gain full control of the device after authenticating via SSH.
References
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Hikvision | DS-2CD Series |
Version: https://www.hikvision.com/en/support/download/firmware/security-firmware-download/ |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-57599",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-22T12:44:40.877849Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-269",
"description": "CWE-269 Improper Privilege Management",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T12:44:49.458Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "DS-2CD Series",
"vendor": "Hikvision",
"versions": [
{
"status": "affected",
"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/",
"versionType": "link"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Joffrey Czarny"
}
],
"descriptions": [
{
"lang": "en",
"value": "There is a privilege escalation vulnerability in some Hikvision cameras. Due to incorrect permission allocation in the device program, attackers can escalate privileges and gain full control of the device after authenticating via SSH."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-22T11:00:49.219Z",
"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"shortName": "hikvision"
},
"references": [
{
"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-cameras/"
}
],
"x_generator": {
"engine": "cveClient/1.0.15"
}
}
},
"cveMetadata": {
"assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
"assignerShortName": "hikvision",
"cveId": "CVE-2026-57599",
"datePublished": "2026-07-22T11:00:49.219Z",
"dateReserved": "2026-06-25T02:07:05.126Z",
"dateUpdated": "2026-07-22T12:44:49.458Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}