CVE-2021-36260criticalunder attackCWE-78

CVE-2021-36260

Published · Updated

Follow this CVE+ Monitor Security cameras web server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.8epss 100%
from disclosure to weapon26 days
Published on NVDSep 22
1st PoC+26d
metasploitSep 18
CISA KEV+110d
Action required by CISAfederal deadline: 2022-01-24

Apply updates per vendor instructions.

In short

A Hikvision web server fails to properly validate user input, allowing attackers to inject malicious commands that execute on the server. This can give attackers complete control over the affected device.

Technical detail

CWE-78 command injection vulnerability in Hikvision product web server stemming from insufficient input validation. An unauthenticated attacker can craft malicious messages containing OS commands that execute with server privileges, leading to complete system compromise.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
public PoCs found — 36
exploitdbwww.exploit-db.com/exploits/50441unverifiedgithubgithub.com/tamim1089/HikvisionExploiter★ 397githubgithub.com/Aiminsun/CVE-2021-36260★ 306githubgithub.com/Cuerz/CVE-2021-36260★ 172githubgithub.com/TaroballzChen/CVE-2021-36260-metasploit★ 20githubgithub.com/rabbitsafe/CVE-2021-36260★ 17githubgithub.com/sylhetyhackvenger/HIKRAVEN★ 10githubgithub.com/tuntin9x/CheckHKRCE★ 7githubgithub.com/yanxinwu946/hikvision-unauthenticated-rce-cve-2021-36260★ 3githubgithub.com/aengussong/hikvision_probe★ 3githubgithub.com/NanoTrash/hikvision_brute★ 2githubgithub.com/saaydmr/hikvision-exploiter★ 1githubgithub.com/haingn/HIK-CVE-2021-36260-Exploit★ 1githubgithub.com/code-msga/HikvisionExploiter_fixed★ 0githubgithub.com/shubtheone/CVE-2021-36260-hikvision★ 0vulncheckvulncheck.com/xdb/bff72b5d73faunverifiedvulncheckvulncheck.com/xdb/1b5ffb5f902aunverifiedvulncheckvulncheck.com/xdb/fde64918a78dunverifiedvulncheckvulncheck.com/xdb/536d9663b22eunverifiedvulncheckvulncheck.com/xdb/085896cb17cfunverifiedvulncheckvulncheck.com/xdb/a0a706788910unverifiedvulncheckvulncheck.com/xdb/58c9a781875bunverifiedvulncheckvulncheck.com/xdb/b03efde8723dunverifiedvulncheckvulncheck.com/xdb/3d6450b00d2funverifiedvulncheckvulncheck.com/xdb/9622e9da156eunverifiedcve_referencepacketstormsecurity.com/files/166167/Hikvision-IP-Camera-Unauthenticated-Command-Injection.htmlunverifiedvulncheckvulncheck.com/xdb/6e02def98dc1unverifiedvulncheckvulncheck.com/xdb/ebbc2b573eddunverifiedcve_referencepacketstormsecurity.com/files/164603/Hikvision-Web-Server-Build-210702-Command-Injection.htmlunverifiedvulncheckvulncheck.com/xdb/92d32617ecdcunverifiedvulncheckvulncheck.com/xdb/df0fc9bf195cunverifiedvulncheckvulncheck.com/xdb/c7787c78e609unverifiedvulncheckvulncheck.com/xdb/3b4ddeccb73cunverifiedvulncheckvulncheck.com/xdb/571b3021541aunverifiedvulncheckvulncheck.com/xdb/36b538d97c5funverifiedvulncheckvulncheck.com/xdb/fb357a667b00unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.