CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2021-09-22
Hikvision IP Camera & NVR Web Server Remote Command Injection Vulnerability (CVE-2021-36260) Security Advisory
[Affected Scope] Web server software embedded in various Hikvision IP cameras and Network Video Recorders (NVRs)
[Impact] Unauthenticated remote attackers can execute arbitrary system commands with root privileges by sending specially crafted HTTP requests, leading to full device compromise
[Mitigation] Immediately upgrade to the latest patched firmware version provided by the vendor and restrict direct internet access to the devices