CVE-2021-36260

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.

Affected products

Hikvision Ip Camera, Hikvision Nvr

Hikvision ds-2cd2026g2-iu\/sl Firmware

All versions

CVSS 3.1

9.8 CRITICAL

EPSS

99.9% (100th percentile)

Weakness

CWE-78

NVD status

Analyzed

Published

2021-09-22