Vulnerabilidades em Hikvision
48 resultadosAnálise Vexday
A Hikvision apresenta 31 vulnerabilidades catalogadas, com 4 classificadas como críticas, mas nenhuma sob exploração ativa conhecida no momento. A fraqueza dominante é injeção de comando (CWE-78), típica de produtos de vigilância, com 3 novos registros nos últimos 90 dias indicando atividade de descoberta contínua. O risco permanece moderado dado a ausência de ataques confirmados, embora a natureza crítica de algumas falhas e o perfil de produto (câmeras e NVRs) justifiquem monitoramento prioritário.
CVE-2025-39246MEDIUMThere is an Unquoted Service Path Vulnerability in some HikCentral FocSign versions. This could allow an authenticated user to potentially eEPSS 0.3%CVE-2026-1749MEDIUMThere is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated user to obtain the adEPSS 0.3%CVE-2024-47486LOWThere is an XSS vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could inject scripts into certain pages by EPSS 0.3%CVE-2025-66173MEDIUMThere is a privilege escalation vulnerability in some Hikvision DVR products. Due to the improper implementation of authentication for the sEPSS 0.2%CVE-2026-85543MEDIUMSome Wi-Fi series camera products have insufficient permission validation on certain interfaces, allowing authenticated low-privileged usersEPSS 0.2%CVE-2026-85545HIGHThere is an Vulnerability in some HikCentral Access Control versions. Authenticated low-privilege users can invoke API interfaces that theirEPSS 0.2%CVE-2026-85544MEDIUMSome Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction withEPSS 0.1%CVE-2026-32684LOWThe application does not impose strict enough restrictions on directory access permissions, posing a risk that other malicious applications EPSS 0.1%