{"id":"CVE-2021-36260","aliases":["EUVD-2021-22880","GHSA-v276-9v2g-hx55"],"status":"published","title":"A command injection vulnerability in the web server of some Hikvision product. Due to the...","description":"A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.99869,"percentile":0.99963,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-20","CWE-77","CWE-78"],"published":"2021-09-22T12:07:55Z","modified":"2026-06-17T03:58:34Z","kev":{"date_added":"2022-01-10","due_date":"2022-01-24","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2022-01-10"},{"source":"kev","since":"2022-01-10"}],"exploits":[{"source":"metasploit","id":"exploit/linux/http/hikvision_cve_2021_36260_blind","title":"Hikvision IP Camera Unauthenticated Command Injection","type":"exploit","platform":"Linux,Unix","date":"2021-09-18","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/http/hikvision_cve_2021_36260_blind"},{"source":"pocgithub","id":"rabbitsafe/CVE-2021-36260","title":"rabbitsafe/CVE-2021-36260","date":"2021-10-18","url":"https://github.com/rabbitsafe/CVE-2021-36260"},{"source":"exploitdb","id":"EDB-50441","title":"Hikvision Web Server Build 210702 - Command Injection","type":"webapps","platform":"hardware","date":"2021-10-25","url":"https://www.exploit-db.com/exploits/50441"},{"source":"pocgithub","id":"Aiminsun/CVE-2021-36260","title":"Aiminsun/CVE-2021-36260","date":"2021-10-27","url":"https://github.com/Aiminsun/CVE-2021-36260"},{"source":"pocgithub","id":"TaroballzChen/CVE-2021-36260-metasploit","title":"TaroballzChen/CVE-2021-36260-metasploit","date":"2021-11-03","url":"https://github.com/TaroballzChen/CVE-2021-36260-metasploit"},{"source":"pocgithub","id":"tuntin9x/CheckHKRCE","title":"tuntin9x/CheckHKRCE","date":"2021-12-13","url":"https://github.com/tuntin9x/CheckHKRCE"},{"source":"pocgithub","id":"Cuerz/CVE-2021-36260","title":"Cuerz/CVE-2021-36260","date":"2022-08-03","url":"https://github.com/Cuerz/CVE-2021-36260"},{"source":"pocgithub","id":"haingn/HIK-CVE-2021-36260-Exploit","title":"haingn/HIK-CVE-2021-36260-Exploit","date":"2023-10-22","url":"https://github.com/haingn/HIK-CVE-2021-36260-Exploit"},{"source":"pocgithub","id":"NanoTrash/hikvision_brute","title":"NanoTrash/hikvision_brute","date":"2024-03-07","url":"https://github.com/NanoTrash/hikvision_brute"},{"source":"pocgithub","id":"tamim1089/HikvisionExploiter","title":"tamim1089/HikvisionExploiter","date":"2024-07-05","url":"https://github.com/tamim1089/HikvisionExploiter"},{"source":"pocgithub","id":"aengussong/hikvision_probe","title":"aengussong/hikvision_probe","date":"2024-11-26","url":"https://github.com/aengussong/hikvision_probe"},{"source":"pocgithub","id":"shubtheone/CVE-2021-36260-hikvision","title":"shubtheone/CVE-2021-36260-hikvision","date":"2026-01-15","url":"https://github.com/shubtheone/CVE-2021-36260-hikvision"},{"source":"pocgithub","id":"saaydmr/hikvision-exploiter","title":"saaydmr/hikvision-exploiter","date":"2026-01-21","url":"https://github.com/saaydmr/hikvision-exploiter"},{"source":"pocgithub","id":"yanxinwu946/hikvision-unauthenticated-rce-cve-2021-36260","title":"yanxinwu946/hikvision-unauthenticated-rce-cve-2021-36260","date":"2026-01-21","url":"https://github.com/yanxinwu946/hikvision-unauthenticated-rce-cve-2021-36260"},{"source":"pocgithub","id":"code-msga/HikvisionExploiter_fixed","title":"code-msga/HikvisionExploiter_fixed","date":"2026-03-26","url":"https://github.com/code-msga/HikvisionExploiter_fixed"},{"source":"pocgithub","id":"sylhetyhackvenger/HIKRAVEN","title":"sylhetyhackvenger/HIKRAVEN","date":"2026-07-17","url":"https://github.com/sylhetyhackvenger/HIKRAVEN"},{"source":"nuclei","id":"CVE-2021-36260","title":"Hikvision IP camera/NVR - Remote Command Execution","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36260.yaml"}],"products":[{"vendor":"hikvision","product":"ds-2cd2021g1-i\\(w\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2023g2-i\\(u\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2026g2-iu\\/sl_firmware"},{"vendor":"hikvision","product":"ds-2cd2027g2-l\\(u\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2027g2-lu\\/sl_firmware"},{"vendor":"hikvision","product":"ds-2cd2043g2-i\\(u\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2046g2-iu\\/sl_firmware"},{"vendor":"hikvision","product":"ds-2cd2047g2-l\\(u\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2063g2-i\\(u\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2066g2-i\\(u\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2066g2-iu\\/sl_firmware"},{"vendor":"hikvision","product":"ds-2cd2083g2-i\\(u\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2086g2-i\\(u\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2086g2-iu\\/sl_firmware"},{"vendor":"hikvision","product":"ds-2cd2087g2-l\\(u\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2121g0-i\\(w\\)\\(s\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2121g1-i\\(w\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2121g1-idw_firmware"},{"vendor":"hikvision","product":"ds-2cd2121g1_firmware"},{"vendor":"hikvision","product":"ds-2cd2123g2-i\\(s\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2123g2-iu_firmware"},{"vendor":"hikvision","product":"ds-2cd2127g2-\\(-su\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2143g2-i\\(s\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2143g2-iu_firmware"},{"vendor":"hikvision","product":"ds-2cd2147g2-l\\(su\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2163g2-i\\(s\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2163g2-iu_firmware"},{"vendor":"hikvision","product":"ds-2cd2166g2-i\\(su\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2183g2-i\\(s\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2183g2-i\\(u\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2183g2-iu_firmware"},{"vendor":"hikvision","product":"ds-2cd2186g2-i\\(su\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2186g2-isu_firmware"},{"vendor":"hikvision","product":"ds-2cd2321g0-i\\/nf_firmware"},{"vendor":"hikvision","product":"ds-2cd2323g2-i\\(u\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2326g2-isu\\/sl_firmware"},{"vendor":"hikvision","product":"ds-2cd2327g2-l\\(u\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2343g2-i\\(u\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2346g2-isu\\/sl_firmware"},{"vendor":"hikvision","product":"ds-2cd2347g2-l\\(u\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2347g2-lsu\\/sl_firmware"},{"vendor":"hikvision","product":"ds-2cd2363g2-i\\(u\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2366g2-i\\(u\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2366g2-isu\\/sl_firmware"},{"vendor":"hikvision","product":"ds-2cd2383g2-i\\(u\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2386g2-i\\(u\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2386g2-isu\\/sl_firmware"},{"vendor":"hikvision","product":"ds-2cd2387g2-l\\(u\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2421g0-i\\(d\\)\\(w\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2421g0-i\\(d\\)w_firmware"},{"vendor":"hikvision","product":"ds-2cd2426g2-i_firmware"},{"vendor":"hikvision","product":"ds-2cd2446g2-i_firmware"},{"vendor":"hikvision","product":"ds-2cd2523g2-i\\(s\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2523g2-i\\(u\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2526g2-i\\(s\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2526g2-is_firmware"},{"vendor":"hikvision","product":"ds-2cd2527g2-ls_firmware"},{"vendor":"hikvision","product":"ds-2cd2543g2-i\\(ws\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2546g2-i\\(s\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2547g2-ls_firmware"},{"vendor":"hikvision","product":"ds-2cd2547g2-lzs_firmware"},{"vendor":"hikvision","product":"ds-2cd2563g2-i\\(s\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2566g2-i\\(s\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2583g2-i\\(s\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2586g2-i\\(s\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2621g0-i\\(z\\)\\(s\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2623g2-izs_firmware"},{"vendor":"hikvision","product":"ds-2cd2626g2-izsu\\/sl_firmware"},{"vendor":"hikvision","product":"ds-2cd2643g2-izs_firmware"},{"vendor":"hikvision","product":"ds-2cd2646g2-izsu\\/sl_firmware"},{"vendor":"hikvision","product":"ds-2cd2663g2-izs_firmware"},{"vendor":"hikvision","product":"ds-2cd2666g2-izs_firmware"},{"vendor":"hikvision","product":"ds-2cd2666g2-izsu\\/sl_firmware"},{"vendor":"hikvision","product":"ds-2cd2683g2-izs_firmware"},{"vendor":"hikvision","product":"ds-2cd2686g2-izs_firmware"},{"vendor":"hikvision","product":"ds-2cd2686g2-izsu\\/sl_firmware"},{"vendor":"hikvision","product":"ds-2cd2721g0-i\\(z\\)\\(s\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd2723g2-izs_firmware"},{"vendor":"hikvision","product":"ds-2cd2743g2-izs_firmware"},{"vendor":"hikvision","product":"ds-2cd2763g2-izs_firmware"},{"vendor":"hikvision","product":"ds-2cd2766g2-izs_firmware"},{"vendor":"hikvision","product":"ds-2cd2783g2-izs_firmware"},{"vendor":"hikvision","product":"ds-2cd2786g2-izs_firmware"},{"vendor":"hikvision","product":"ds-2cd3023g2-iu_firmware"},{"vendor":"hikvision","product":"ds-2cd3026g2-is_firmware"},{"vendor":"hikvision","product":"ds-2cd3026g2-iu\\/sl_firmware"},{"vendor":"hikvision","product":"ds-2cd3043g2-iu_firmware"},{"vendor":"hikvision","product":"ds-2cd3047g2-ls_firmware"},{"vendor":"hikvision","product":"ds-2cd3056g2-is_firmware"},{"vendor":"hikvision","product":"ds-2cd3056g2-iu\\/sl_firmware"},{"vendor":"hikvision","product":"ds-2cd3056g2iu\\/sl_firmware"},{"vendor":"hikvision","product":"ds-2cd3063g2-iu_firmware"},{"vendor":"hikvision","product":"ds-2cd3086g2-is_firmware"},{"vendor":"hikvision","product":"ds-2cd3123g2-i\\(s\\)u_firmware"},{"vendor":"hikvision","product":"ds-2cd3126g2-is\\(u\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd3126g2-is_firmware"},{"vendor":"hikvision","product":"ds-2cd3143g2-i\\(s\\)u_firmware"},{"vendor":"hikvision","product":"ds-2cd3156g2-is\\(u\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd3156g2-is_firmware"},{"vendor":"hikvision","product":"ds-2cd3163g2-i\\(s\\)u_firmware"},{"vendor":"hikvision","product":"ds-2cd3186g2-is\\(u\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd3323g2-iu_firmware"},{"vendor":"hikvision","product":"ds-2cd3326g2-isu\\/sl_firmware"},{"vendor":"hikvision","product":"ds-2cd3343g2-iu_firmware"},{"vendor":"hikvision","product":"ds-2cd3347g2-ls\\(u\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd3356g2-is\\(u\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd3356g2-is_firmware"},{"vendor":"hikvision","product":"ds-2cd3356g2-isu\\/sl_firmware"},{"vendor":"hikvision","product":"ds-2cd3363g2-iu_firmware"},{"vendor":"hikvision","product":"ds-2cd3386g2-is\\(u\\)_firmware"},{"vendor":"hikvision","product":"ds-2cd3386g2-is_firmware"},{"vendor":"hikvision","product":"ds-2cd3523g2-is_firmware"},{"vendor":"hikvision","product":"ds-2cd3526g2-is_firmware"},{"vendor":"hikvision","product":"ds-2cd3543g2-is_firmware"},{"vendor":"hikvision","product":"ds-2cd3547g2-ls_firmware"},{"vendor":"hikvision","product":"ds-2cd3556g2-is_firmware"},{"vendor":"hikvision","product":"ds-2cd3563g2-is_firmware"},{"vendor":"hikvision","product":"ds-2cd3586g2-is_firmware"},{"vendor":"hikvision","product":"ds-2cd3623g2-izs_firmware"},{"vendor":"hikvision","product":"ds-2cd3626g2-izs_firmware"},{"vendor":"hikvision","product":"ds-2cd3643g2-izs_firmware"},{"vendor":"hikvision","product":"ds-2cd3656g2-izs_firmware"},{"vendor":"hikvision","product":"ds-2cd3663g2-izs_firmware"},{"vendor":"hikvision","product":"ds-2cd3686g2-izs_firmware"},{"vendor":"hikvision","product":"ds-2cd3723g2-izs_firmware"},{"vendor":"hikvision","product":"ds-2cd3726g2-izs_firmware"},{"vendor":"hikvision","product":"ds-2cd3743g2-izs_firmware"},{"vendor":"hikvision","product":"ds-2cd3756g2-izs_firmware"},{"vendor":"hikvision","product":"ds-2cd3763g2-izs_firmware"},{"vendor":"hikvision","product":"ds-2cd3786g2-izs_firmware"},{"vendor":"hikvision","product":"ds-2df5225x-ae3\\(t3\\)_firmware"},{"vendor":"hikvision","product":"ds-2df5225x-ael\\(t3\\)_firmware"},{"vendor":"hikvision","product":"ds-2df5232x-ae3\\)t3\\)_firmware"},{"vendor":"hikvision","product":"ds-2df5232x-ael\\(t3\\)_firmware"},{"vendor":"hikvision","product":"ds-2df6a225x-ael\\)t3\\)_firmware"},{"vendor":"hikvision","product":"ds-2df6a236x-ael\\(t3\\)_firmware"},{"vendor":"hikvision","product":"ds-2df6a425x-ael\\(t3\\)_firmware"},{"vendor":"hikvision","product":"ds-2df6a436x-ael\\(t3\\)_firmware"},{"vendor":"hikvision","product":"ds-2df6a436x-ael\\(t5\\)_firmware"},{"vendor":"hikvision","product":"ds-2df6a436x-aely\\(t5\\)_firmware"},{"vendor":"hikvision","product":"ds-2df6a825x-ael_firmware"},{"vendor":"hikvision","product":"ds-2df6a836x-ael\\(t5\\)_firmware"},{"vendor":"hikvision","product":"ds-2df7225ix-ael\\(t3\\)_firmware"},{"vendor":"hikvision","product":"ds-2df7225ix-aelw\\(t3\\)_firmware"},{"vendor":"hikvision","product":"ds-2df7232ix-ael\\(t3\\)_firmware"},{"vendor":"hikvision","product":"ds-2df7232ix-aelw\\(t3\\)_firmware"},{"vendor":"hikvision","product":"ds-2df8225ih-ael\\(w\\)_firmware"},{"vendor":"hikvision","product":"ds-2df8225ih-ael_firmware"},{"vendor":"hikvision","product":"ds-2df8225ix-ael\\(t3\\)_firmware"},{"vendor":"hikvision","product":"ds-2df8225ix-ael\\(t5\\)_firmware"},{"vendor":"hikvision","product":"ds-2df8225ix-aelw\\(t3\\)_firmware"},{"vendor":"hikvision","product":"ds-2df8225ix-aelw\\(t5\\)_firmware"},{"vendor":"hikvision","product":"ds-2df8236i5x-aelw_firmware"},{"vendor":"hikvision","product":"ds-2df8242i5x-ael\\(t3\\)_firmware"},{"vendor":"hikvision","product":"ds-2df8242i5x-aelw\\(t3\\)_firmware"},{"vendor":"hikvision","product":"ds-2df8242i5x-aelw\\(t5\\)_firmware"},{"vendor":"hikvision","product":"ds-2df8242ix-ael\\(t5\\)_firmware"},{"vendor":"hikvision","product":"ds-2df8242ix-aelw\\(t3\\)_firmware"},{"vendor":"hikvision","product":"ds-2df8242ix-aely\\(t3\\)_firmware"},{"vendor":"hikvision","product":"ds-2df8250i8x-ael\\(t3\\)_firmware"},{"vendor":"hikvision","product":"ds-2df8425ix-ael\\(t3\\)_firmware"},{"vendor":"hikvision","product":"ds-2df8425ix-ael\\(t5\\)_firmware"},{"vendor":"hikvision","product":"ds-2df8425ix-aelw\\(t3\\)_firmware"},{"vendor":"hikvision","product":"ds-2df8425ix-aelw\\(t5\\)_firmware"},{"vendor":"hikvision","product":"ds-2df8436i5x-aelw\\(t3\\)_firmware"},{"vendor":"hikvision","product":"ds-2df8442ixs-ael\\(t5\\)_firmware"},{"vendor":"hikvision","product":"ds-2df8442ixs-aelw\\(t2\\)_firmware"},{"vendor":"hikvision","product":"ds-2df8442ixs-aelw\\(t5\\)_firmware"},{"vendor":"hikvision","product":"ds-2df8442ixs-aelwy\\(t5\\)_firmware"},{"vendor":"hikvision","product":"ds-2df8442ixs-aely\\(t5\\)_firmware"},{"vendor":"hikvision","product":"ds-2df8a442ixs-ael\\(t2\\)_firmware"},{"vendor":"hikvision","product":"ds-2df8a442ixs-ael\\(t5\\)_firmware"},{"vendor":"hikvision","product":"ds-2df8a442ixs-aely\\(t5\\)_firmware"},{"vendor":"hikvision","product":"ds-2df8a442ixs-af\\/sp\\(t5\\)_firmware"},{"vendor":"hikvision","product":"ds-2df8a442nxs-ael\\(t5\\)_firmware"},{"vendor":"hikvision","product":"ds-2df8a842ixs-ael\\(t5\\)_firmware"},{"vendor":"hikvision","product":"ds-2dy9236i8x-a\\(t3\\)_firmware"},{"vendor":"hikvision","product":"ds-2dy9236i8x-a_firmware"},{"vendor":"hikvision","product":"ds-2dy9236ix-a\\(t3\\)_firmware"},{"vendor":"hikvision","product":"ds-2dy9236x-a\\(t3\\)_firmware"},{"vendor":"hikvision","product":"ds-2dy9240ix-a\\(t5\\)_firmware"},{"vendor":"hikvision","product":"ds-2dy92500x-a\\(t5\\)_firmware"},{"vendor":"hikvision","product":"ds-2dy9250izs-a\\(t5\\)_firmware"},{"vendor":"hikvision","product":"ds-2dyh2a0ixs-d\\(t2\\)_firmware"},{"vendor":"hikvision","product":"ds-2td1117-2\\/pa_firmware"},{"vendor":"hikvision","product":"ds-2td1117-3\\/pa_firmware"},{"vendor":"hikvision","product":"ds-2td1117-6\\/pa_firmware"},{"vendor":"hikvision","product":"ds-2td1217b-3\\/pa_firmware"},{"vendor":"hikvision","product":"ds-2td1217b-6\\/pa_firmware"},{"vendor":"hikvision","product":"ds-2td4136t-9_firmware"},{"vendor":"hikvision","product":"ds-2td4137-25\\/w_firmware"},{"vendor":"hikvision","product":"ds-2td4137-50\\/w_firmware"},{"vendor":"hikvision","product":"ds-2td4166t-9_firmware"},{"vendor":"hikvision","product":"ds-2td4167-25\\/w_firmware"},{"vendor":"hikvision","product":"ds-2td4167-50\\/w_firmware"},{"vendor":"hikvision","product":"ds-2td6236t-50h2l_firmware"},{"vendor":"hikvision","product":"ds-2td6237-50h4l\\/w_firmware"},{"vendor":"hikvision","product":"ds-2td6237-75c4l\\/w_firmware"},{"vendor":"hikvision","product":"ds-2td6266t-25h2l_firmware"},{"vendor":"hikvision","product":"ds-2td6266t-50h2l_firmware"},{"vendor":"hikvision","product":"ds-2td6267-100c4l\\/w_firmware"},{"vendor":"hikvision","product":"ds-2td6267-100c4l\\/wy_firmware"},{"vendor":"hikvision","product":"ds-2td6267-50h4l\\/w_firmware"},{"vendor":"hikvision","product":"ds-2td6267-75c4l\\/w_firmware"},{"vendor":"hikvision","product":"ds-2td6267-75c4l\\/wy_firmware"},{"vendor":"hikvision","product":"ds-2td8166-100c2f\\/v2_firmware"},{"vendor":"hikvision","product":"ds-2td8166-150ze2f\\/v2_firmware"},{"vendor":"hikvision","product":"ds-2td8166-150zh2f\\/v2_firmware"},{"vendor":"hikvision","product":"ds-2td8166-180ze2f\\/v2_firmware"},{"vendor":"hikvision","product":"ds-2td8166-75c2f\\/v2_firmware"},{"vendor":"hikvision","product":"ds-2td8167-150zc4f\\/w_firmware"},{"vendor":"hikvision","product":"ds-2td8167-190ze2f\\/w_firmware"},{"vendor":"hikvision","product":"ds-2td8167-190ze2f\\/wy_firmware"},{"vendor":"hikvision","product":"ds-2td8167-230zg2f\\/w_firmware"},{"vendor":"hikvision","product":"ds-2td8167-230zg2f\\/wy_firmware"},{"vendor":"hikvision","product":"ds-2xe6242f-is\\/316l\\(b\\)_firmware"},{"vendor":"hikvision","product":"ds-2xe6422fwd-izhrs_firmware"},{"vendor":"hikvision","product":"ds-2xe6442f-izhrs\\(b\\)_firmware"},{"vendor":"hikvision","product":"ds-2xe6452f-izh\\(r\\)s_firmware"},{"vendor":"hikvision","product":"ds-2xe6482f-izhrs_firmware"},{"vendor":"hikvision","product":"ds-7104ni-q1\\/4p\\/m_firmware"},{"vendor":"hikvision","product":"ds-7104ni-q1\\/4p_firmware"},{"vendor":"hikvision","product":"ds-7104ni-q1\\/m_firmware"},{"vendor":"hikvision","product":"ds-7104ni-q1_firmware"},{"vendor":"hikvision","product":"ds-7108ni-q1\\/8p\\/m_firmware"},{"vendor":"hikvision","product":"ds-7108ni-q1\\/8p_firmware"},{"vendor":"hikvision","product":"ds-7108ni-q1\\/m_firmware"},{"vendor":"hikvision","product":"ds-7108ni-q1_firmware"},{"vendor":"hikvision","product":"ds-7604ni-k1\\/4p\\/4g_firmware"},{"vendor":"hikvision","product":"ds-7604ni-k1_firmware"},{"vendor":"hikvision","product":"ds-7604ni-q1\\/4p_firmware"},{"vendor":"hikvision","product":"ds-7604ni-q1_firmware"},{"vendor":"hikvision","product":"ds-7608ni-k1\\/4g_firmware"},{"vendor":"hikvision","product":"ds-7608ni-k1\\/8p\\/4g_firmware"},{"vendor":"hikvision","product":"ds-7608ni-k1\\/8p_firmware"},{"vendor":"hikvision","product":"ds-7608ni-k1_firmware"},{"vendor":"hikvision","product":"ds-7608ni-q1\\/8p_firmware"},{"vendor":"hikvision","product":"ds-7608ni-q1_firmware"},{"vendor":"hikvision","product":"ds-7608ni-q2\\/8p_firmware"},{"vendor":"hikvision","product":"ds-7608ni-q2_firmware"},{"vendor":"hikvision","product":"ds-760ni-k1\\/4p_firmware"},{"vendor":"hikvision","product":"ds-7616ni-k1_firmware"},{"vendor":"hikvision","product":"ds-7616ni-q1_firmware"},{"vendor":"hikvision","product":"ds-7616ni-q2\\/16p_firmware"},{"vendor":"hikvision","product":"ds-7616ni-q2_firmware"},{"vendor":"hikvision","product":"ids-2pt9a144mxs-d\\/t2_firmware"},{"vendor":"hikvision","product":"ids-2sk718mxs-d_firmware"},{"vendor":"hikvision","product":"ids-2sk8144ixs-d\\/j_firmware"},{"vendor":"hikvision","product":"ids-2vs435-f840-ey\\(t3\\)_firmware"},{"vendor":"hikvision","product":"ids-2vs435-f840-ey_firmware"},{"vendor":"hikvision","product":"ptz-n2204i-de3_firmware"},{"vendor":"hikvision","product":"ptz-n2404i-de3_firmware"},{"vendor":"hikvision","product":"ptz-n4215-de3_firmware"},{"vendor":"hikvision","product":"ptz-n4215i-de_firmware"},{"vendor":"hikvision","product":"ptz-n4225i-de_firmware"},{"vendor":"hikvision","product":"ptz-n5225i-a_firmware"},{"vendor":"hikvision","product":"security cameras web server"}],"references":[{"url":"https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-notification-command-injection-vulnerability-in-some-hikvision-products/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/164603/Hikvision-Web-Server-Build-210702-Command-Injection.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/166167/Hikvision-IP-Camera-Unauthenticated-Command-Injection.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.cyfirma.com/wp-content/uploads/2022/08/HikvisionSurveillanceCamerasVulnerabilities.pdf","tags":["x_refsource_MISC","x_transferred","Broken Link","Exploit","Third Party Advisory"]},{"url":"https://therecord.media/experts-warn-of-widespread-exploitation-involving-hikvision-cameras/","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-36260","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-36260"},{"url":"https://therecord.media/experts-warn-of-widespread-exploitation-involving-hikvision-cameras"},{"url":"https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-notification-command-injection-vulnerability-in-some-hikvision-products"},{"url":"https://github.com/advisories/GHSA-v276-9v2g-hx55"}],"sources":{"cve":[{"id":"CVE-2021-36260","description":"A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.","status":"published","published":"2021-09-22T12:07:55Z","modified":"2025-10-21T23:25:31.943Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:33:05.989686Z"}],"euvd":[{"id":"EUVD-2021-22880","description":"A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.","status":"published","published":"2021-09-22T12:07:55Z","modified":"2025-10-21T23:25:31Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"exploited_since":"2022-01-10","updated_at":"2026-11-02T20:31:25.901288Z"}],"ghsa":[{"id":"GHSA-v276-9v2g-hx55","title":"A command injection vulnerability in the web server of some Hikvision product. Due to the...","description":"A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.","status":"published","published":"2022-05-24T19:15:26Z","modified":"2025-10-22T00:33:34Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-20","CWE-77","CWE-78"],"updated_at":"2026-11-02T15:04:08.198655Z"}],"kev":[{"id":"CVE-2021-36260","title":"Hikvision Improper Input Validation","description":"A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation.","cwes":["CWE-78"],"kev":{"date_added":"2022-01-10","due_date":"2022-01-24","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.541131Z"}],"nvd":[{"id":"CVE-2021-36260","description":"A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.","status":"published","published":"2021-09-22T13:15:07.69Z","modified":"2026-06-17T03:58:34.08Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:06:58.933037Z"}]}}