Description
There is a command injection vulnerability in some Hikvision NVRs. This could allow an authenticated user with administrative rights to execute arbitrary commands.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Hikvision DS-7604NI-K1 / 4P(B)
V4.30.096build221220 and the versions prior to itaffected
Hikvision DS-76xxNI-Mx
Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）affected
Hikvision DS-77xxNI-Mx
Default version status: affected
Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）affected
Hikvision DS-96xxxNI-Mxx
Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）affected
Hikvision DS-76xxNXI-Ix
Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）affected
Hikvision DS-77xxNXI-Ix
Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）affected
Hikvision DS-86xxNXI-Ix
Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）affected
Hikvision DS-96xxNXI-Ix
Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）affected
Hikvision iDS-76xxNXI-Mx
Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）affected
Hikvision iDS-77xxNXI-Mx
Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）affected
Hikvision iDS-96xxxMXI-Mxx
Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）affected
Hikvision DS-7604NI-M1/4P
Versions after V5.00.000 (including V5.00.000) and before V5.01.070（not including V5.01.070）affected