Hikvision vulnerabilities | LiveThreat CVE Feed

CVE	Product	CVSS	EPSS	Published	Summary
CVE-2026-85543	WS Wi-Fi series camera Hikvision	4.3	0%	Sep 10	Some Wi-Fi series camera products have insufficient permission validation on certain interfaces, allowing authenticated low-privileged users to obtain device Wi-Fi configuration…
CVE-2026-85545	HA HikCentral Access Control Hikvision	7.1	0%	Sep 10	There is an Vulnerability in some HikCentral Access Control versions
CVE-2026-85544	DS DS-KV6124 Hikvision	6.1	0%	Sep 10	Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card,…
CVE-2026-16843	DS DS-3WAP621E-SI Hikvision	7.2	1%	Jul 31	Some Hikvision Networking Products are vulnerable to authenticated command execution due to insufficient input validation
CVE-2026-61392	DS DS-2DE Series Hikvision	5.3	0%	Jul 22	There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain partial information from the device’s memory
CVE-2026-61391	DS DS-2DE Series Hikvision	7.2	1%	Jul 22	There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers to cause device malfunction by sending specially crafted…
CVE-2026-61390	DS DS-2CD Series Hikvision	7.7	0%	Jul 22	There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfunction by sending specially crafted packets
CVE-2026-57600	DS DS-2DP Series Hikvision	7.5	0%	Jul 22	Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data
CVE-2026-57599	DS DS-2CD Series Hikvision	6.6	0%	Jul 22	There is a privilege escalation vulnerability in some Hikvision cameras
CVE-2026-32684	HA Hik-Connect APP Hikvision	2.9	0%	May 12	The application does not impose strict enough restrictions on directory access permissions, posing a risk that other malicious applications could obtain sensitive information
CVE-2026-3828	DS DS-3E1310P-SI Hikvision	7.2	1%	May 9	Some Hikvision switch products (discontinued since December 2023) are vulnerable to authenticated remote command execution due to insufficient input validation
CVE-2026-1749	HP HikCentral Professional Hikvision	6.8	0%	May 9	There is an Access Control Vulnerability in some HikCentral Professional versions
CVE-2025-66176	DF Ds-k1t201a Firmware Hikvision	8.8	0%	Jan 13	There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products
CVE-2025-66174	DF Ds-7104hghi-f1 Firmware Hikvision	6.8	0%	Dec 19	There is an improper authentication vulnerability in some Hikvision DVR products
CVE-2025-66173	DF Ds-7104hghi-f1 Firmware Hikvision	6.2	0%	Dec 19	There is a privilege escalation vulnerability in some Hikvision DVR products
CVE-2024-47487	HP Hikcentral Professional Hikvision	8.8	0%	Oct 18	There is a SQL injection vulnerability in some HikCentral Professional versions
CVE-2024-47486	HM Hikcentral Master Hikvision	6.1	0%	Oct 18	There is an XSS vulnerability in some HikCentral Master Lite versions
CVE-2024-47485	HM Hikcentral Master Hikvision	9.8	1%	Oct 18	There is a CSV injection vulnerability in some HikCentral Master Lite versions
CVE-2023-33806	DF Ds-d5b86rb/b Firmware Hikvision	7.8	0%	Apr 15	Insecure default configurations in Hikvision Interactive Tablet DS-D5B86RB/B V2.3.0 build220119, allows attackers to execute arbitrary commands
CVE-2024-25064	HP Hikcentral Professional Hikvision	4.3	0%	Mar 2	Due to insufficient server-side validation, an attacker with login privileges could access certain resources that the attacker should not have access to by changing parameter…
CVE-2024-25063	HP Hikcentral Professional Hikvision	7.5	1%	Mar 2	Due to insufficient server-side validation, a successful exploit of this vulnerability could allow an attacker to gain access to certain URLs that the attacker should not have…
CVE-2023-6895	IB Intercom Broadcast System Hikvision	9.8	89%	Dec 17	A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK)
CVE-2023-6894	IB Intercom Broadcast System Hikvision	6.5	1%	Dec 17	A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK)
CVE-2023-6893	IB Intercom Broadcast System Hikvision	7.5	70%	Dec 17	A vulnerability was found in Hikvision Intercom Broadcasting System 3.0.3_20201113_RELEASE(HIK) and classified as problematic
CVE-2023-28813	LO Localservicecomponents Hikvision	7.5	1%	Nov 23	An attacker could exploit a vulnerability by sending crafted messages to computers installed with this plug-in to modify plug-in parameters, which could cause affected computers…
CVE-2023-28812	LO Localservicecomponents Hikvision	9.8	1%	Nov 23	There is a buffer overflow vulnerability in a web browser plug-in could allow an attacker to exploit the vulnerability by sending crafted messages to computers installed with this…
CVE-2023-28811	NF Nvr-208mh-c/8p(d) Firmware Hikvision	6.5	0%	Nov 23	There is a buffer overflow in the password recovery feature of Hikvision NVR/DVR models
CVE-2023-28810	DF Ds-k1t804amf Firmware Hikvision	4.3	10%	Jun 15	Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities
CVE-2023-28809	DF Ds-k1t671m Firmware Hikvision	7.5	1%	Jun 15	Some access control products are vulnerable to a session hijacking attack because the product does not update the session ID after a user successfully logs in
CVE-2023-28808	DF Ds-a80316s Firmware Hikvision	9.8	1%	Apr 11	Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the admin permission
CVE-2022-28173	DF Ds-3wf01c-2n/o Firmware Hikvision	9.8	1%	Dec 19	The web server of some Hikvision wireless bridge products have an access control vulnerability which can be used to obtain the admin permission
CVE-2022-28172	DF Ds-a81016s Firmware Hikvision	6.1	1%	Jun 27	The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability
CVE-2022-28171	DF Ds-a71048r-cvs Firmware Hikvision	9.8	52%	Jun 27	The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability
CVE-2021-36260 In wildKEV	DF Ds-2cd2626g2-izsu/sl Firmware Hikvision	9.8	100%	Sep 22	Hikvision Improper Input Validation
CVE-2020-7057	DF Ds-7204hghi-f1 Firmware Hikvision	5.3	1%	Jan 14	Hikvision DVR DS-7204HGHI-F1 V4.0.1 build 180903 Web Version sends a different response for failed ISAPI/Security/sessionLogin/capabilities login attempts depending on whether the…
CVE-2013-4976	DF Ds-2cd7153-e Firmware Hikvision	9.8	36%	Dec 27	Hikvision DS-2CD7153-E IP Camera has security bypass via hardcoded credentials
CVE-2013-4975	DF Ds-2cd7153-e Firmware Hikvision	8.8	12%	Dec 27	Hikvision DS-2CD7153-E IP Camera has Privilege Escalation
CVE-2018-6414	DS DS-2DE4xxxW,DS-2DE5xxxW,DS-2DE7xxxW hikvision	9.8	2%	Aug 13	A buffer overflow vulnerability in the web server of some Hikvision IP Cameras allows an attacker to send a specially crafted message to affected devices
CVE-2018-6413	DF Ds-2cd9111-s Firmware Hikvision	7.5	2%	Apr 18	There is a buffer overflow in the Hikvision Camera DS-2CD9111-S of V4.1.2 build 160203 and before, and this vulnerability allows remote attackers to launch a denial of service…
CVE-2017-14953	DF Ds-2cd2432f-iw Firmware Hikvision	6.5	0%	Dec 1	HikVision Wi-Fi IP cameras, when used in a wired configuration, allow physically proximate attackers to trigger association with an arbitrary access point by leveraging a default…
CVE-2017-13774	IV Ivms-4200 Hikvision	7.8	0%	Aug 30	Hikvision iVMS-4200 devices before v2.6.2.7 allow local users to generate password-recovery codes via unspecified vectors
CVE-2017-7923	DF Ds-2cd4324f-i(z) Firmware Hikvision	8.8	2%	May 6	A Password in Configuration File issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 160530, DS-2CD2xx0F-I Series V5.2.0 build 140721 to…
CVE-2017-7921 In wildKEV	DF Ds-2cd4324f-i(h) Firmware Hikvision	9.8	100%	May 6	Hikvision Multiple Products Improper Authentication Vulnerability
CVE-2015-4409	DS Ds-76xxx Series Firmware Hikvision	6.5	1%	Mar 13	Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service (service interruption) via a…
CVE-2015-4408	DS Ds-77xxx Series Firmware Hikvision	6.5	1%	Mar 13	Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service (service interruption) via a…
CVE-2015-4407	DS Ds-77xxx Series Firmware Hikvision	6.5	1%	Mar 13	Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service (service interruption) via a…
CVE-2014-4880	DD Dvr Ds-7204 Firmware Hikvision	–	71%	Dec 8	Buffer overflow in Hikvision DVR DS-7204 Firmware 2.2.10 build 131009, and other models and versions, allows remote attackers to execute arbitrary code via an RTSP PLAY request…
CVE-2013-4977	DF Ds-2cd7153-e Firmware Hikvision	–	17%	Mar 3	Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 (Jan 2013), and possibly other devices, allows remote attackers to cause…