CVE-2021-36260Hikvision Improper Input Validation
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 9.3 | HIGH | 2.0NVD | AV:N/AC:M/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due Jan 24, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2021-36260
- Status
- Analyzed
- Assigner (CNA)
- hikvision
- Published
- Sep 22, 2021
- Last modified
- 2026-06-17 03:58 UTC
- Weaknesses
Affected Products
From NVD CPE configurations.
hikvisionds-2cd2026g2-iu/sl firmware0 version ranges
No version detail published.
hikvisionds-2cd2046g2-iu/sl firmware0 version ranges
No version detail published.
hikvisionds-2cd2066g2-i(u) firmware0 version ranges
No version detail published.
hikvisionds-2cd2066g2-iu/sl firmware0 version ranges
No version detail published.
hikvisionds-2cd2086g2-i(u) firmware0 version ranges
No version detail published.
hikvisionds-2cd2086g2-iu/sl firmware0 version ranges
No version detail published.
hikvisionds-2cd2166g2-i(su) firmware0 version ranges
No version detail published.
hikvisionds-2cd2186g2-i(su) firmware0 version ranges
No version detail published.
hikvisionds-2cd2186g2-isu firmware0 version ranges
No version detail published.
hikvisionds-2cd2326g2-isu/sl firmware0 version ranges
No version detail published.
hikvisionds-2cd2346g2-isu/sl firmware0 version ranges
No version detail published.
hikvisionds-2cd2366g2-i(u) firmware0 version ranges
No version detail published.
hikvisionds-2cd2366g2-isu/sl firmware0 version ranges
No version detail published.
hikvisionds-2cd2386g2-i(u) firmware0 version ranges
No version detail published.
hikvisionds-2cd2386g2-isu/sl firmware0 version ranges
No version detail published.
hikvisionds-2cd2426g2-i firmware0 version ranges
No version detail published.
hikvisionds-2cd2446g2-i firmware0 version ranges
No version detail published.
hikvisionds-2cd2526g2-i(s) firmware0 version ranges
No version detail published.
hikvisionds-2cd2526g2-is firmware0 version ranges
No version detail published.
hikvisionds-2cd2546g2-i(s) firmware0 version ranges
No version detail published.
hikvisionds-2cd2566g2-i(s) firmware0 version ranges
No version detail published.
hikvisionds-2cd2586g2-i(s) firmware0 version ranges
No version detail published.
hikvisionds-2cd2626g2-izsu/sl firmware0 version ranges
No version detail published.
hikvisionds-2cd2646g2-izsu/sl firmware0 version ranges
No version detail published.
hikvisionds-2cd2666g2-izs firmware0 version ranges
No version detail published.
hikvisionds-2cd2666g2-izsu/sl firmware0 version ranges
No version detail published.
hikvisionds-2cd2686g2-izs firmware0 version ranges
No version detail published.
hikvisionds-2cd2686g2-izsu/sl firmware0 version ranges
No version detail published.
hikvisionds-2cd2766g2-izs firmware0 version ranges
No version detail published.
hikvisionds-2cd2786g2-izs firmware0 version ranges
No version detail published.
hikvisionds-2cd2027g2-l(u) firmware0 version ranges
No version detail published.
hikvisionds-2cd2047g2-l(u) firmware0 version ranges
No version detail published.
hikvisionds-2cd2027g2-lu/sl firmware0 version ranges
No version detail published.
hikvisionds-2cd2087g2-l(u) firmware0 version ranges
No version detail published.
hikvisionds-2cd2127g2-(-su) firmware0 version ranges
No version detail published.
hikvisionds-2cd2147g2-l(su) firmware0 version ranges
No version detail published.
hikvisionds-2cd2327g2-l(u) firmware0 version ranges
No version detail published.
hikvisionds-2cd2347g2-l(u) firmware0 version ranges
No version detail published.
hikvisionds-2cd2347g2-lsu/sl firmware0 version ranges
No version detail published.
hikvisionds-2cd2387g2-l(u) firmware0 version ranges
No version detail published.
hikvisionds-2cd2527g2-ls firmware0 version ranges
No version detail published.
hikvisionds-2cd2547g2-ls firmware0 version ranges
No version detail published.
hikvisionds-2cd2547g2-lzs firmware0 version ranges
No version detail published.
hikvisionds-2cd2121g0-i(w)(s) firmware0 version ranges
No version detail published.
hikvisionds-2cd2321g0-i/nf firmware0 version ranges
No version detail published.
hikvisionds-2cd2421g0-i(d)(w) firmware0 version ranges
No version detail published.
hikvisionds-2cd2421g0-i(d)w firmware0 version ranges
No version detail published.
hikvisionds-2cd2621g0-i(z)(s) firmware0 version ranges
No version detail published.
hikvisionds-2cd2721g0-i(z)(s) firmware0 version ranges
No version detail published.
hikvisionds-2cd2121g1-i(w) firmware0 version ranges
No version detail published.
hikvisionds-2cd2121g1 firmware0 version ranges
No version detail published.
hikvisionds-2cd2121g1-idw firmware0 version ranges
No version detail published.
hikvisionds-2cd2023g2-i(u) firmware0 version ranges
No version detail published.
hikvisionds-2cd2043g2-i(u) firmware0 version ranges
No version detail published.
hikvisionds-2cd2063g2-i(u) firmware0 version ranges
No version detail published.
hikvisionds-2cd2083g2-i(u) firmware0 version ranges
No version detail published.
hikvisionds-2cd2123g2-i(s) firmware0 version ranges
No version detail published.
hikvisionds-2cd2123g2-iu firmware0 version ranges
No version detail published.
hikvisionds-2cd2143g2-i(s) firmware0 version ranges
No version detail published.
hikvisionds-2cd2143g2-iu firmware0 version ranges
No version detail published.
hikvisionds-2cd2163g2-i(s) firmware0 version ranges
No version detail published.
hikvisionds-2cd2163g2-iu firmware0 version ranges
No version detail published.
hikvisionds-2cd2183g2-i(s) firmware0 version ranges
No version detail published.
hikvisionds-2cd2183g2-iu firmware0 version ranges
No version detail published.
hikvisionds-2cd2323g2-i(u) firmware0 version ranges
No version detail published.
hikvisionds-2cd2343g2-i(u) firmware0 version ranges
No version detail published.
hikvisionds-2cd2363g2-i(u) firmware0 version ranges
No version detail published.
hikvisionds-2cd2183g2-i(u) firmware0 version ranges
No version detail published.
hikvisionds-2cd2523g2-i(s) firmware0 version ranges
No version detail published.
hikvisionds-2cd2543g2-i(ws) firmware0 version ranges
No version detail published.
hikvisionds-2cd2563g2-i(s) firmware0 version ranges
No version detail published.
hikvisionds-2cd2583g2-i(s) firmware0 version ranges
No version detail published.
hikvisionds-2cd2623g2-izs firmware0 version ranges
No version detail published.
hikvisionds-2cd2643g2-izs firmware0 version ranges
No version detail published.
hikvisionds-2cd2663g2-izs firmware0 version ranges
No version detail published.
hikvisionds-2cd2683g2-izs firmware0 version ranges
No version detail published.
hikvisionds-2cd2723g2-izs firmware0 version ranges
No version detail published.
hikvisionds-2cd2743g2-izs firmware0 version ranges
No version detail published.
hikvisionds-2cd2763g2-izs firmware0 version ranges
No version detail published.
hikvisionds-2cd2783g2-izs firmware0 version ranges
No version detail published.
hikvisionds-2cd3023g2-iu firmware0 version ranges
No version detail published.
hikvisionds-2cd3043g2-iu firmware0 version ranges
No version detail published.
hikvisionds-2cd3063g2-iu firmware0 version ranges
No version detail published.
hikvisionds-2cd3123g2-i(s)u firmware0 version ranges
No version detail published.
hikvisionds-2cd3143g2-i(s)u firmware0 version ranges
No version detail published.
hikvisionds-2cd3163g2-i(s)u firmware0 version ranges
No version detail published.
hikvisionds-2cd3323g2-iu firmware0 version ranges
No version detail published.
hikvisionds-2cd3343g2-iu firmware0 version ranges
No version detail published.
hikvisionds-2cd3363g2-iu firmware0 version ranges
No version detail published.
hikvisionds-2cd3523g2-is firmware0 version ranges
No version detail published.
hikvisionds-2cd3543g2-is firmware0 version ranges
No version detail published.
hikvisionds-2cd3563g2-is firmware0 version ranges
No version detail published.
hikvisionds-2cd3623g2-izs firmware0 version ranges
No version detail published.
hikvisionds-2cd3643g2-izs firmware0 version ranges
No version detail published.
hikvisionds-2cd3663g2-izs firmware0 version ranges
No version detail published.
hikvisionds-2cd3723g2-izs firmware0 version ranges
No version detail published.
hikvisionds-2cd3743g2-izs firmware0 version ranges
No version detail published.
hikvisionds-2cd3763g2-izs firmware0 version ranges
No version detail published.
hikvisionds-2cd2021g1-i(w) firmware0 version ranges
No version detail published.
hikvisionds-2cd2383g2-i(u) firmware0 version ranges
No version detail published.
hikvisionds-2cd2523g2-i(u) firmware0 version ranges
No version detail published.
hikvisionds-2cd3026g2-iu/sl firmware0 version ranges
No version detail published.
hikvisionds-2cd3056g2iu/sl firmware0 version ranges
No version detail published.
hikvisionds-2cd3126g2-is firmware0 version ranges
No version detail published.
hikvisionds-2cd3126g2-is(u) firmware0 version ranges
No version detail published.
hikvisionds-2cd3156g2-is firmware0 version ranges
No version detail published.
hikvisionds-2cd3156g2-is(u) firmware0 version ranges
No version detail published.
hikvisionds-2cd3186g2-is(u) firmware0 version ranges
No version detail published.
hikvisionds-2cd3326g2-isu/sl firmware0 version ranges
No version detail published.
hikvisionds-2cd3356g2-is firmware0 version ranges
No version detail published.
hikvisionds-2cd3356g2-is(u) firmware0 version ranges
No version detail published.
hikvisionds-2cd3356g2-isu/sl firmware0 version ranges
No version detail published.
hikvisionds-2cd3386g2-is firmware0 version ranges
No version detail published.
hikvisionds-2cd3386g2-is(u) firmware0 version ranges
No version detail published.
hikvisionds-2cd3526g2-is firmware0 version ranges
No version detail published.
hikvisionds-2cd3556g2-is firmware0 version ranges
No version detail published.
hikvisionds-2cd3586g2-is firmware0 version ranges
No version detail published.
hikvisionds-2cd3626g2-izs firmware0 version ranges
No version detail published.
hikvisionds-2cd3726g2-izs firmware0 version ranges
No version detail published.
hikvisionds-2cd3026g2-is firmware0 version ranges
No version detail published.
hikvisionds-2cd3056g2-is firmware0 version ranges
No version detail published.
hikvisionds-2cd3056g2-iu/sl firmware0 version ranges
No version detail published.
hikvisionds-2cd3086g2-is firmware0 version ranges
No version detail published.
hikvisionds-2cd3656g2-izs firmware0 version ranges
No version detail published.
hikvisionds-2cd3686g2-izs firmware0 version ranges
No version detail published.
hikvisionds-2cd3756g2-izs firmware0 version ranges
No version detail published.
hikvisionds-2cd3786g2-izs firmware0 version ranges
No version detail published.
hikvisionds-2cd3047g2-ls firmware0 version ranges
No version detail published.
hikvisionds-2cd3347g2-ls(u) firmware0 version ranges
No version detail published.
hikvisionds-2cd3547g2-ls firmware0 version ranges
No version detail published.
hikvisionds-2xe6242f-is/316l(b) firmware0 version ranges
No version detail published.
hikvisionds-2xe6422fwd-izhrs firmware0 version ranges
No version detail published.
hikvisionds-2xe6442f-izhrs(b) firmware0 version ranges
No version detail published.
hikvisionds-2xe6452f-izh(r)s firmware0 version ranges
No version detail published.
hikvisionds-2xe6482f-izhrs firmware0 version ranges
No version detail published.
hikvisionds-2dyh2a0ixs-d(t2) firmware0 version ranges
No version detail published.
hikvisionds-2dy9236i8x-a firmware0 version ranges
No version detail published.
hikvisionds-2dy9236i8x-a(t3) firmware0 version ranges
No version detail published.
hikvisionds-2dy9236ix-a(t3) firmware0 version ranges
No version detail published.
hikvisionds-2dy9236x-a(t3) firmware0 version ranges
No version detail published.
hikvisionds-2dy9240ix-a(t5) firmware0 version ranges
No version detail published.
hikvisionds-2dy9250izs-a(t5) firmware0 version ranges
No version detail published.
hikvisionds-2dy92500x-a(t5) firmware0 version ranges
No version detail published.
hikvisionptz-n2204i-de3 firmware0 version ranges
No version detail published.
hikvisionptz-n2404i-de3 firmware0 version ranges
No version detail published.
hikvisionptz-n4215-de3 firmware0 version ranges
No version detail published.
hikvisionptz-n4215i-de firmware0 version ranges
No version detail published.
hikvisionptz-n4225i-de firmware0 version ranges
No version detail published.
hikvisionptz-n5225i-a firmware0 version ranges
No version detail published.
hikvisionds-2df5225x-ae3(t3) firmware0 version ranges
No version detail published.
hikvisionds-2df5225x-ael(t3) firmware0 version ranges
No version detail published.
hikvisionds-2df5232x-ae3)t3) firmware0 version ranges
No version detail published.
hikvisionds-2df5232x-ael(t3) firmware0 version ranges
No version detail published.
hikvisionds-2df6a225x-ael)t3) firmware0 version ranges
No version detail published.
hikvisionds-2df6a236x-ael(t3) firmware0 version ranges
No version detail published.
hikvisionds-2df6a425x-ael(t3) firmware0 version ranges
No version detail published.
hikvisionds-2df6a436x-ael(t3) firmware0 version ranges
No version detail published.
hikvisionds-2df6a436x-ael(t5) firmware0 version ranges
No version detail published.
hikvisionds-2df6a436x-aely(t5) firmware0 version ranges
No version detail published.
hikvisionds-2df6a825x-ael firmware0 version ranges
No version detail published.
hikvisionds-2df6a836x-ael(t5) firmware0 version ranges
No version detail published.
hikvisionds-2df7225ix-ael(t3) firmware0 version ranges
No version detail published.
hikvisionds-2df7225ix-aelw(t3) firmware0 version ranges
No version detail published.
hikvisionds-2df7232ix-ael(t3) firmware0 version ranges
No version detail published.
hikvisionds-2df7232ix-aelw(t3) firmware0 version ranges
No version detail published.
hikvisionds-2df8225ih-ael firmware0 version ranges
No version detail published.
hikvisionds-2df8225ih-ael(w) firmware0 version ranges
No version detail published.
hikvisionds-2df8225ix-ael(t3) firmware0 version ranges
No version detail published.
hikvisionds-2df8225ix-ael(t5) firmware0 version ranges
No version detail published.
hikvisionds-2df8225ix-aelw(t3) firmware0 version ranges
No version detail published.
hikvisionds-2df8225ix-aelw(t5) firmware0 version ranges
No version detail published.
hikvisionds-2df8236i5x-aelw firmware0 version ranges
No version detail published.
hikvisionds-2df8242i5x-aelw(t3) firmware0 version ranges
No version detail published.
hikvisionds-2df8242i5x-aelw(t5) firmware0 version ranges
No version detail published.
hikvisionds-2df8242i5x-ael(t3) firmware0 version ranges
No version detail published.
hikvisionds-2df8242ix-ael(t5) firmware0 version ranges
No version detail published.
hikvisionds-2df8242ix-aelw(t3) firmware0 version ranges
No version detail published.
hikvisionds-2df8242ix-aely(t3) firmware0 version ranges
No version detail published.
hikvisionds-2df8250i8x-ael(t3) firmware0 version ranges
No version detail published.
hikvisionds-2df8425ix-ael(t3) firmware0 version ranges
No version detail published.
hikvisionds-2df8425ix-ael(t5) firmware0 version ranges
No version detail published.
hikvisionds-2df8425ix-aelw(t3) firmware0 version ranges
No version detail published.
hikvisionds-2df8425ix-aelw(t5) firmware0 version ranges
No version detail published.
hikvisionds-2df8436i5x-aelw(t3) firmware0 version ranges
No version detail published.
hikvisionds-2df8442ixs-ael(t5) firmware0 version ranges
No version detail published.
hikvisionds-2df8442ixs-aelw(t2) firmware0 version ranges
No version detail published.
hikvisionds-2df8442ixs-aelw(t5) firmware0 version ranges
No version detail published.
hikvisionds-2df8442ixs-aelwy(t5) firmware0 version ranges
No version detail published.
hikvisionds-2df8442ixs-aely(t5) firmware0 version ranges
No version detail published.
hikvisionds-2df8a442ixs-ael(t2) firmware0 version ranges
No version detail published.
hikvisionds-2df8a442ixs-ael(t5) firmware0 version ranges
No version detail published.
hikvisionds-2df8a442ixs-aely(t5) firmware0 version ranges
No version detail published.
hikvisionds-2df8a442ixs-af/sp(t5) firmware0 version ranges
No version detail published.
hikvisionds-2df8a442nxs-ael(t5) firmware0 version ranges
No version detail published.
hikvisionds-2df8a842ixs-ael(t5) firmware0 version ranges
No version detail published.
hikvisionids-2pt9a144mxs-d/t2 firmware0 version ranges
No version detail published.
hikvisionids-2sk718mxs-d firmware0 version ranges
No version detail published.
hikvisionids-2sk8144ixs-d/j firmware0 version ranges
No version detail published.
hikvisionids-2vs435-f840-ey firmware0 version ranges
No version detail published.
hikvisionids-2vs435-f840-ey(t3) firmware0 version ranges
No version detail published.
hikvisionds-2td1217b-3/pa firmware0 version ranges
No version detail published.
hikvisionds-2td1217b-6/pa firmware0 version ranges
No version detail published.
hikvisionds-2td1117-2/pa firmware0 version ranges
No version detail published.
hikvisionds-2td1117-3/pa firmware0 version ranges
No version detail published.
hikvisionds-2td1117-6/pa firmware0 version ranges
No version detail published.
hikvisionds-2td4136t-9 firmware0 version ranges
No version detail published.
hikvisionds-2td4137-25/w firmware0 version ranges
No version detail published.
hikvisionds-2td4137-50/w firmware0 version ranges
No version detail published.
hikvisionds-2td4166t-9 firmware0 version ranges
No version detail published.
hikvisionds-2td4167-25/w firmware0 version ranges
No version detail published.
hikvisionds-2td4167-50/w firmware0 version ranges
No version detail published.
hikvisionds-2td6236t-50h2l firmware0 version ranges
No version detail published.
hikvisionds-2td6237-50h4l/w firmware0 version ranges
No version detail published.
hikvisionds-2td6237-75c4l/w firmware0 version ranges
No version detail published.
hikvisionds-2td6266t-25h2l firmware0 version ranges
No version detail published.
hikvisionds-2td6266t-50h2l firmware0 version ranges
No version detail published.
hikvisionds-2td6267-100c4l/w firmware0 version ranges
No version detail published.
hikvisionds-2td6267-100c4l/wy firmware0 version ranges
No version detail published.
hikvisionds-2td6267-50h4l/w firmware0 version ranges
No version detail published.
hikvisionds-2td6267-75c4l/w firmware0 version ranges
No version detail published.
hikvisionds-2td6267-75c4l/wy firmware0 version ranges
No version detail published.
hikvisionds-2td8166-100c2f/v2 firmware0 version ranges
No version detail published.
hikvisionds-2td8166-150ze2f/v2 firmware0 version ranges
No version detail published.
hikvisionds-2td8166-150zh2f/v2 firmware0 version ranges
No version detail published.
hikvisionds-2td8166-180ze2f/v2 firmware0 version ranges
No version detail published.
hikvisionds-2td8166-75c2f/v2 firmware0 version ranges
No version detail published.
hikvisionds-2td8167-150zc4f/w firmware0 version ranges
No version detail published.
hikvisionds-2td8167-190ze2f/w firmware0 version ranges
No version detail published.
hikvisionds-2td8167-190ze2f/wy firmware0 version ranges
No version detail published.
hikvisionds-2td8167-230zg2f/w firmware0 version ranges
No version detail published.
hikvisionds-2td8167-230zg2f/wy firmware0 version ranges
No version detail published.
hikvisionds-7604ni-k1 firmware0 version ranges
No version detail published.
hikvisionds-760ni-k1/4p firmware0 version ranges
No version detail published.
hikvisionds-7604ni-k1/4p/4g firmware0 version ranges
No version detail published.
hikvisionds-7608ni-k1 firmware0 version ranges
No version detail published.
hikvisionds-7608ni-k1/4g firmware0 version ranges
No version detail published.
hikvisionds-7608ni-k1/8p firmware0 version ranges
No version detail published.
hikvisionds-7608ni-k1/8p/4g firmware1 version range
- 4.30.210 through 4.31.000
hikvisionds-7616ni-k1 firmware1 version range
- 4.30.210 through 4.31.000
hikvisionds-7604ni-q1 firmware1 version range
- 4.30.210 through 4.31.000
hikvisionds-7604ni-q1/4p firmware1 version range
- 4.30.210 through 4.31.000
hikvisionds-7608ni-q1 firmware1 version range
- 4.30.210 through 4.31.000
hikvisionds-7608ni-q1/8p firmware1 version range
- 4.30.210 through 4.31.000
hikvisionds-7608ni-q2 firmware1 version range
- 4.30.210 through 4.31.000
hikvisionds-7608ni-q2/8p firmware1 version range
- 4.30.210 through 4.31.000
hikvisionds-7616ni-q1 firmware1 version range
- 4.30.210 through 4.31.000
hikvisionds-7616ni-q2 firmware1 version range
- 4.30.210 through 4.31.000
hikvisionds-7616ni-q2/16p firmware1 version range
- 4.30.210 through 4.31.000
hikvisionds-7104ni-q1 firmware1 version range
- 4.30.300 through 4.31.100
hikvisionds-7104ni-q1/4p firmware1 version range
- 4.30.300 through 4.31.100
hikvisionds-7104ni-q1/4p/m firmware1 version range
- 4.30.300 through 4.31.100
hikvisionds-7104ni-q1/m firmware1 version range
- 4.30.300 through 4.31.100
hikvisionds-7108ni-q1 firmware1 version range
- 4.30.300 through 4.31.100
hikvisionds-7108ni-q1/8p firmware1 version range
- 4.30.300 through 4.31.100
hikvisionds-7108ni-q1/8p/m firmware1 version range
- 4.30.300 through 4.31.100
hikvisionds-7108ni-q1/m firmware1 version range
- 4.30.300 through 4.31.100
References
- packetstormsecurity.com http://packetstormsecurity.com/files/164603/Hikvision-Web-Server-Build-210702-Command-Injection.html
- packetstormsecurity.com http://packetstormsecurity.com/files/166167/Hikvision-IP-Camera-Unauthenticated-Command-Injection.html
- therecord.media https://therecord.media/experts-warn-of-widespread-exploitation-involving-hikvision-cameras/
- cyfirma.com https://www.cyfirma.com/wp-content/uploads/2022/08/HikvisionSurveillanceCamerasVulnerabilities.pdf
- hikvision.com https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-notification-command-injection-vulnerability-in-some-hikvision-products/
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-36260