Hikvision vulnerabilities

Products

• Ds-2cd Series 5
• Hikcentral Professional 5
• Ds-2de Series 4
• Ds-2cd7153-e Firmware 3
• Ds-3wap521-si 3
• Ds-3wap522-si 3
• Ds-3wap621e-si 3
• Ds-3wap622e-si 3
• Ds-3wap622g-si 3
• Ds-3wap623e-si 3
• Ds-7204hghi-f1 Firmware 3
• Ds-76xxx Series Firmware 3
• Ds-77xxx Series Firmware 3
• Ds-a71024/48/72r,ds-a80624s,ds-a81016s,ds-a72024/72r,ds-a80316s,ds-a82024d 3
• Ds-a71024/48r-cvs,ds-a72024/48r-cvs 3
• Ds-a71024 Firmware 3
• Ds-a71048 Firmware 3
• Ds-a71048r-cvs Firmware 3
• Ds-a71072r Firmware 3
• Ds-a72024 Firmware 3
• Ds-a72072r Firmware 3
• Ds-a80316s Firmware 3
• Ds-a80624s Firmware 3
• Ds-a81016s Firmware 3
• Ds-a82024d Firmware 3
• Ds-k1t341c 3
• Ds-k1t671 Firmware 3
• Hikcentral Master Lite 3
• Hikcentral Professional 3
• Intercom Broadcasting System 3
• Intercom Broadcast System 3
• Csmp Isecure Center 2
• Ds-2cd2032-i Firmware 2
• Ds-2cd2112-i Firmware 2
• Ds-2cd2132-i Firmware 2
• Ds-2cd2212-i5 Firmware 2
• Ds-2cd2232-i5 Firmware 2
• Ds-2cd2312-i Firmware 2
• Ds-2cd2332-i Firmware 2
• Ds-2cd2412f-i\(w\) Firmware 2

Show 84 moreShow less

• Ds-2cd2432f-i\(w\) Firmware 2
• Ds-2cd2512f-i\(s\) Firmware 2
• Ds-2cd2532f-i\(s\) Firmware 2
• Ds-2cd2612f-i\(s\) Firmware 2
• Ds-2cd2632f-i\(s\) Firmware 2
• Ds-2cd2712f-i\(s\) Firmware 2
• Ds-2cd2732f-i\(s\) Firmware 2
• Ds-2cd2t32-i3 Firmware 2
• Ds-2cd2t32-i5 Firmware 2
• Ds-2cd2t32-i8 Firmware 2
• Ds-2cd4012f-\(a\) Firmware 2
• Ds-2cd4012f-\(p\) Firmware 2
• Ds-2cd4012fwd-\(a\) Firmware 2
• Ds-2cd4012fwd-\(p\) Firmware 2
• Ds-2cd4012fwd-\(w\) Firmware 2
• Ds-2cd4012f-\(w\) Firmware 2
• Ds-2cd4024f-\(a\) Firmware 2
• Ds-2cd4024f-\(p\) Firmware 2
• Ds-2cd4024f-\(w\) Firmware 2
• Ds-2cd4032fwd-\(a\) Firmware 2
• Ds-2cd4032fwd-\(p\) Firmware 2
• Ds-2cd4032fwd-\(w\) Firmware 2
• Ds-2cd4112f-i\(z\) Firmware 2
• Ds-2cd4112fwd-i\(z\) Firmware 2
• Ds-2cd4124f-i\(z\) Firmware 2
• Ds-2cd4132fwd-i\(z\) Firmware 2
• Ds-2cd4212f-i\(h\) Firmware 2
• Ds-2cd4212f-i\(s\) Firmware 2
• Ds-2cd4212f-i\(z\) Firmware 2
• Ds-2cd4212fwd-i\(h\) Firmware 2
• Ds-2cd4212fwd-i\(s\) Firmware 2
• Ds-2cd4212fwd-i\(z\) Firmware 2
• Ds-2cd4224f-i\(h\) Firmware 2
• Ds-2cd4224f-i\(s\) Firmware 2
• Ds-2cd4224f-i\(z\) Firmware 2
• Ds-2cd4232fwd-i\(h\) Firmware 2
• Ds-2cd4232fwd-i\(s\) Firmware 2
• Ds-2cd4232fwd-i\(z\) Firmware 2
• Ds-2cd4312f-i\(h\) Firmware 2
• Ds-2cd4312f-i\(s\) Firmware 2
• Ds-2cd4312f-i\(z\) Firmware 2
• Ds-2cd4324f-i\(h\) Firmware 2
• Ds-2cd4324f-i\(s\) Firmware 2
• Ds-2cd4324f-i\(z\) Firmware 2
• Ds-2cd4332fwd-i\(h\) Firmware 2
• Ds-2cd4332fwd-i\(s\) Firmware 2
• Ds-2cd4332fwd-i\(z\) Firmware 2
• Ds-2cd63xx Series Firmware 2
• Ds-2cd6412fwd Firmware 2
• Ds-2dfx Series Firmware 2
• Ds-7104hghi-f1 2
• Ds-7104hghi-f1 Firmware 2
• Ds-7204hghi-f1 2
• Ds-7604ni-k1 / 4p(b) 2
• Ds-76xxni-mx 2
• Ds-77xxni-mx 2
• Ds-a72048r-cvs Firmware 2
• Ds-k1t320efwx Firmware 2
• Ds-k1t320efx Firmware 2
• Ds-k1t320ewx Firmware 2
• Ds-k1t320ex Firmware 2
• Ds-k1t320mfwx Firmware 2
• Ds-k1t320mfx Firmware 2
• Ds-k1t320mwx Firmware 2
• Ds-k1t320mx Firmware 2
• Ds-k1t320xxx 2
• Ds-k1t341amf Firmware 2
• Ds-k1t341am Firmware 2
• Ds-k1t341axx 2
• Ds-k1t341c Firmware 2
• Ds-k1t343ewx Firmware 2
• Ds-k1t343ex Firmware 2
• Ds-k1t343mwx Firmware 2
• Ds-k1t343mx Firmware 2
• Ds-k1t343xxx 2
• Ds-k1t671mf Firmware 2
• Ds-k1t671m Firmware 2
• Ds-k1t671xxx 2
• Ds-k1t804af Firmware 2
• Ds-k1t804amf Firmware 2
• Ds-k1t804axx 2
• Hikcentral Master 2
• Isecure Center 2
• Localservicecomponents 2

Newest

• hikvision wi-fi series camera Some Wi-Fi series camera products have insufficient permission validation on certain interfaces,... CVE-2026-85543 4.3 MediumSeptember 10, 2026
• hikvision hikcentral access control There is an Vulnerability in some HikCentral Access Control versions. Authenticated low-privilege... CVE-2026-85545 7.1 HighSeptember 10, 2026
• hikvision ds-kd8003, ds-kd8005, ds-kv6103 +10 more +12 more There is an Improper Encryption Configuration Vulnerability in some Hikvision Intercom Products.... CVE-2026-85544 6.1 MediumSeptember 10, 2026
• hikvision ds-3wap521-si, ds-3wap522-si, ds-3wap621e-si +7 more +9 more Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to... CVE-2026-16843 7.2 HighJuly 31, 2026
• hikvision ds-2cd series, ds-2de series +1 more There is a information disclosure vulnerability in some Hikvision cameras, allowing... CVE-2026-61392 5.3 MediumJuly 22, 2026
• hikvision ds-2cd series, ds-2de series +1 more There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow... CVE-2026-61391 7.2 HighJuly 22, 2026
• hikvision ds-2cd series, ds-2de series +1 more There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow... CVE-2026-61390 7.7 HighJuly 22, 2026
• hikvision ds-2cd series, ds-2de series, ds-2dp series +1 more +3 more Insufficient validation of input parameters in the firmware of some Hikvision cameras allows... CVE-2026-57600 7.5 HighJuly 22, 2026
• hikvision ds-2cd series There is a privilege escalation vulnerability in some Hikvision cameras. Due to incorrect... CVE-2026-57599 6.6 MediumJuly 22, 2026
• hikvision hik-connect app The application does not impose strict enough restrictions on directory access permissions,... CVE-2026-32684 2.9 LowMay 12, 2026
• hikvision ds-3e1310p-si, ds-3e1318p-si, ds-3e1326p-si +2 more Some Hikvision switch products (discontinued since December 2023) are vulnerable to authenticated... CVE-2026-3828 7.2 HighMay 9, 2026
• hikvision hikcentral professional There is an Access Control Vulnerability in some HikCentral Professional versions. This could... CVE-2026-1749 6.8 MediumMay 9, 2026
• hikvision ds-3wap521-si, ds-3wap522-si, ds-3wap621e-si +3 more +5 more Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to... CVE-2026-0709 Public exploit 7.2 HighJanuary 30, 2026
• hikvision ds-2cd1xx1, ds-2cd1xxxg0(t), ds-2cd1xxxg2 +96 more +98 more There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision... CVE-2025-66177 Public exploit 8.8 HighJanuary 13, 2026
• hikvision ds-k1t105a firmware, ds-k1t201a/k1t105a, ds-k1t201a firmware +43 more +45 more There is a Stack overflow Vulnerability in the device Search and Discovery feature of Hikvision... CVE-2025-66176 8.8 HighJanuary 13, 2026
• hikvision ds-7104hghi-f1, ds-7104hghi-f1 firmware, ds-7204hghi-f1 +1 more +3 more There is an improper authentication vulnerability in some Hikvision DVR products. Due to the... CVE-2025-66174 6.5 MediumDecember 19, 2025
• hikvision ds-7104hghi-f1, ds-7104hghi-f1 firmware, ds-7204hghi-f1 +1 more +3 more There is a privilege escalation vulnerability in some Hikvision DVR products. Due to the improper... CVE-2025-66173 6.2 MediumDecember 19, 2025
• hikvision csmp isecure center Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2024-08-01... CVE-2024-58274 EPSS 17.4% 8.3 HighOctober 22, 2025
• hikvision csmp isecure center Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2023-06-25... CVE-2023-53691 8.3 HighOctober 22, 2025
• hikvision isecure center Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation,... CVE-2023-28815 9.8 CriticalOctober 17, 2025
• hikvision isecure center Some versions of Hikvision's iSecure Center Product have an improper file upload control... CVE-2023-28814 9.8 CriticalOctober 17, 2025
• hikvision hikcentral professional There is an Access Control Vulnerability in some HikCentral Professional versions. This could... CVE-2025-39247 Public exploit 8.6 HighAugust 29, 2025
• hikvision hikcentral focsign There is an Unquoted Service Path Vulnerability in some HikCentral FocSign versions. This could... CVE-2025-39246 5.3 MediumAugust 29, 2025
• hikvision hikcentral master lite There is a CSV Injection Vulnerability in some HikCentral Master Lite versions. This could allow... CVE-2025-39245 4.7 MediumAugust 29, 2025
• hikvision integrated security management platform Hikvision Integrated Security Management Platform Remote Command Execution via applyCT Fastjson CVE-2025-34067 EPSS 22.0% 10.0 CriticalJuly 2, 2025
• hikvision ds-3wap521-si, ds-3wap522-si, ds-3wap621e-si +3 more +5 more Some Hikvision Wireless Access Point are vulnerable to authenticated remote command execution due... CVE-2025-39240 7.2 HighJune 13, 2025
• hikvision hikcentral master lite, hikcentral master +1 more There is an XSS vulnerability in some HikCentral Master Lite versions. If exploited, an attacker... CVE-2024-47486 2.1 LowOctober 18, 2024
• hikvision hikcentral professional There is a SQL injection vulnerability in some HikCentral Professional versions. This could allow... CVE-2024-47487 7.2 HighOctober 18, 2024
• hikvision hikcentral master lite, hikcentral master +1 more There is a CSV injection vulnerability in some HikCentral Master Lite versions. If exploited, an... CVE-2024-47485 5.5 MediumOctober 18, 2024
• hikvision ds-d5b86rb\/b firmware Insecure default configurations in Hikvision Interactive Tablet DS-D5B86RB/B V2.3.0 build220119,... CVE-2023-33806 7.8 HighApril 15, 2024
• hikvision ds-7604ni-k1 / 4p(b), ds-7604ni-k1\/4p\(b\), ds-7604ni-m1/4p +15 more +17 more There is a command injection vulnerability in some Hikvision NVRs. This could allow an... CVE-2024-29949 7.2 HighApril 2, 2024
• hikvision ds-7604nxi-k1/4p There is an out-of-bounds read vulnerability in some Hikvision NVRs. An authenticated attacker... CVE-2024-29948 3.8 LowApril 2, 2024
• hikvision ds-7604ni-k1 / 4p(b) There is a NULL dereference pointer vulnerability in some Hikvision NVRs. Due to an insufficient... CVE-2024-29947 2.7 LowApril 2, 2024
• hikvision hikcentral professional Due to insufficient server-side validation, an attacker with login privileges could access... CVE-2024-25064 4.3 MediumMarch 2, 2024
• hikvision hikcentral professional Due to insufficient server-side validation, a successful exploit of this vulnerability could... CVE-2024-25063 7.5 HighMarch 2, 2024
• hikvision intercom broadcasting system, intercom broadcast system +1 more Hikvision Intercom Broadcasting System ping.php os command injection CVE-2023-6895 Public exploit EPSS 89.0% 6.3 MediumDecember 17, 2023
• hikvision intercom broadcasting system, intercom broadcast system +1 more Hikvision Intercom Broadcasting System Log File system.html information disclosure CVE-2023-6894 4.3 MediumDecember 17, 2023
• hikvision intercom broadcasting system, intercom broadcast system +1 more Hikvision Intercom Broadcasting System exportrecord.php path traversal CVE-2023-6893 EPSS 70.2% 4.3 MediumDecember 17, 2023
• hikvision localservicecomponents An attacker could exploit a vulnerability by sending crafted messages to computers installed with... CVE-2023-28813 8.1 HighNovember 23, 2023
• hikvision localservicecomponents There is a buffer overflow vulnerability in a web browser plug-in could allow an attacker to... CVE-2023-28812 9.1 CriticalNovember 23, 2023
• hikvision ds-7104ni-q1\(c\) firmware, ds-7104ni-q1\(d\) firmware, ds-7108ni-q1\(c\) firmware +96 more +98 more There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models. If... CVE-2023-28811 7.4 HighNovember 23, 2023
• hikvision ds-k1t320efwx firmware, ds-k1t320efx firmware, ds-k1t320ewx firmware +42 more +44 more Some access control/intercom products have unauthorized modification of device network... CVE-2023-28810 Public exploit EPSS 10.4% 4.3 MediumJune 15, 2023
• hikvision ds-k1t320efwx firmware, ds-k1t320efx firmware, ds-k1t320ewx firmware +29 more +31 more Some access control products are vulnerable to a session hijacking attack because the product... CVE-2023-28809 7.5 HighJune 15, 2023
• hikvision ds-a71024/48/72r,ds-a80624s,ds-a81016s,ds-a72024/72r,ds-a80316s,ds-a82024d, ds-a71024/48r-cvs,ds-a72024/48r-cvs, ds-a71024 firmware +9 more +11 more Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can... CVE-2023-28808 9.1 CriticalApril 11, 2023
• hikvision ds-3wf01c-2n/o, ds-3wf01c-2n\/o firmware, ds-3wf0ac-2nt +1 more +3 more The web server of some Hikvision wireless bridge products have an access control vulnerability... CVE-2022-28173 9.1 CriticalDecember 19, 2022
• hikvision ds-a71024/48/72r,ds-a80624s,ds-a81016s,ds-a72024/72r,ds-a80316s,ds-a82024d, ds-a71024/48r-cvs,ds-a72024/48r-cvs, ds-a71024 firmware +10 more +12 more The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security... CVE-2022-28172 6.5 MediumJune 27, 2022
• hikvision ds-a71024/48/72r,ds-a80624s,ds-a81016s,ds-a72024/72r,ds-a80316s,ds-a82024d, ds-a71024/48r-cvs,ds-a72024/48r-cvs, ds-a71024 firmware +10 more +12 more The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security... CVE-2022-28171 Public exploit EPSS 51.6% 7.5 HighJune 27, 2022
• hikvision ds-2cd2021g1-i\(w\) firmware, ds-2cd2023g2-i\(u\) firmware, ds-2cd2026g2-iu\/sl firmware +254 more +256 more A command injection vulnerability in the web server of some Hikvision product. Due to the... CVE-2021-36260 In KEVPublic exploit EPSS 99.9% 9.8 CriticalSeptember 22, 2021
• hikvision ds-7204hghi-f1 firmware Hikvision DVR DS-7204HGHI-F1 V4.0.1 build 180903 Web Version sends a different response for... CVE-2020-7057 5.3 MediumJanuary 14, 2020
• hikvision ds-2cd7153-e firmware Hikvision DS-2CD7153-E IP Camera has security bypass via hardcoded credentials CVE-2013-4976 Public exploit EPSS 36.1% 9.8 CriticalDecember 27, 2019
• Show olderLoading…