BDU:2021-05455

Scores

EPSS Score

0.0000

CVSS

3.x 9.8

Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

All CVSS Scores

CVSS 4.0

0.0

CVSS 3.x

9.8

Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS 2.0

10.0

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Уязвимость встроенного веб-сервера микропрограммного обеспечения IP-камер Hikvision связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольные команды

Sources

bdu

Related Vulnerabilities

CVE-2021-36260

Reference Links

https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-36260

https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-notification-command-injection-vulnerability-in-some-hikvision-products/

https://safe-surf.ru/upload/VULN/VULN-20210922.3.pdf

https://us-cert.cisa.gov/ncas/current-activity/2021/09/28/rce-vulnerability-hikvision-cameras-cve-2021-36260

Vulnerable Software

Type: Configuration

Vendor: hikvision

Product: (i)ds-2dexxxx

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: (i)ds-2ptxxxx

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: (i)ds-2se7xxxx

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd1x23g0

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd1x23g0e(c)

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd1x43(b)

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd1x43(c)

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd1x43g0e

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd1x53(b)

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd1x53(c)

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd1xx1

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd1xx7g0

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd2x21g0

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd2x21g0(c)

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd2x21g1

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd2x21g1(c)

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd2xx3g2

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd2xx6g2

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd2xx6g2(c)

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd2xx7g2

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd2xx7g2(c)

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd3x21g0

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd3x21g0(c)

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd3x51g0(c)

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd3xx3g2

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd3xx6g2

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd3xx6g2(c)

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd3xx7g0e

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd3xx7g2

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd3xx7g2(c)

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd4xx0

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd4xx6

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cd8cx6g0

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cvxxx1

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2cvxxx6

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2df5xxxx

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2df6xxxx

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2df6xxxx-cx

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2df7xxxx

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2df8xxxx

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2df9xxxx

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2dy9xxxx

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2dyhxxxx

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2tbxxx

Operating System: * *

Trait:

{
  "version_end_excluding": "210702"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2td1xxx-xx

Operating System: * *

Trait:

{
  "version_end_excluding": "210702"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2td2xxx-xx

Operating System: * *

Trait:

{
  "version_end_excluding": "210702"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2td41xx-xx/wx

Operating System: * *

Trait:

{
  "version_end_excluding": "210702"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2td4xxx-xx/v2

Operating System: * *

Trait:

{
  "version_end_excluding": "210702"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2td62xx-xx/v2

Operating System: * *

Trait:

{
  "version_end_excluding": "210702"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2td62xx-xx/wx

Operating System: * *

Trait:

{
  "version_end_excluding": "210702"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2td81xx-xx/v2

Operating System: * *

Trait:

{
  "version_end_excluding": "210702"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2td81xx-xx/wx

Operating System: * *

Trait:

{
  "version_end_excluding": "210702"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2tdxxxxb

Operating System: * *

Trait:

{
  "version_end_excluding": "210702"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2xc66x5g0

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2xe62x2f(d)

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-2xe64x2f(b)

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-71xxni-q1xx(c)

Operating System: * *

Trait:

{
  "version_end_including": "4.31.100 Build 210511",
  "version_start_including": "4.30.300 Build 210221"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-76xxni-k1xx(c)

Operating System: * *

Trait:

{
  "version_end_including": "4.31.000 Build 210511",
  "version_start_including": "4.30.210 Build 201224"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-76xxni-qxx(c)

Operating System: * *

Trait:

{
  "version_end_including": "4.31.000 Build 210511",
  "version_start_including": "4.30.210 Build 201224"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-bxxxx

Operating System: * *

Trait:

{
  "version_end_excluding": "210702"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-hilooki-nvr-1xxhxx-d(c)

Operating System: * *

Trait:

{
  "version_end_including": "4.31.100 Build 210511",
  "version_start_including": "4.30.300 Build 210221"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-hilooki-nvr-1xxmhxx-c(c)

Operating System: * *

Trait:

{
  "version_end_including": "4.31.000 Build 210511",
  "version_start_including": "4.30.210 Build 201224"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-hilooki-nvr-1xxmhxx-d(c)

Operating System: * *

Trait:

{
  "version_end_including": "4.31.100 Build 210511",
  "version_start_including": "4.30.300 Build 210221"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-hilooki-nvr-2xxmhxx-c(c)

Operating System: * *

Trait:

{
  "version_end_including": "4.31.000 Build 210511",
  "version_start_including": "4.30.210 Build 201224"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-hiwatchi-hwn-21xxhxx(c)

Operating System: * *

Trait:

{
  "version_end_including": "4.31.100 Build 210511",
  "version_start_including": "4.30.300 Build 210221"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-hiwatchi-hwn-21xxmhxx(c)

Operating System: * *

Trait:

{
  "version_end_including": "4.31.100 Build 210511",
  "version_start_including": "4.30.300 Build 210221"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-hiwatchi-hwn-41xxmhxx(c)

Operating System: * *

Trait:

{
  "version_end_including": "4.31.000 Build 210511",
  "version_start_including": "4.30.210 Build 201224"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ds-hiwatchi-hwn-42xxmhxx(c)

Operating System: * *

Trait:

{
  "version_end_including": "4.31.000 Build 210511",
  "version_start_including": "4.30.210 Build 201224"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: hwi-xxxx

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: hwp-nxxxx

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ids-2cd6810

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ids-2pt9xxxx

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ids-2sk7xxxx

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ids-2sk8xxxx

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ids-2sr8xxxx

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ids-2vsxxxx

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ids-2xm6810

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ipc-xxxx

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu

Type: Configuration

Vendor: hikvision

Product: ptz-nxxxx

Operating System: * *

Trait:

{
  "version_end_excluding": "210625"
}

Source: bdu