Multiple Hikvision Cameras ICSA-17-124-01 Multiple Securtiy Vulnerabilities
BID:98313
Info
Multiple Hikvision Cameras ICSA-17-124-01 Multiple Securtiy Vulnerabilities
| Bugtraq ID: | 98313 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-7921 CVE-2017-7923 |
| Remote: | Yes |
| Local: | No |
| Published: | May 04 2017 12:00AM |
| Updated: | May 23 2017 04:23PM |
| Credit: | Montecrypto |
| Vulnerable: |
Hikvision Digital Technology DS-2DFx Series 5.4.5 Build 160928 Hikvision Digital Technology DS-2DFx Series 5.2 build 140805 Hikvision Digital Technology DS-2CD63xx Series 5.3.5 Build 160106 Hikvision Digital Technology DS-2CD63xx Series 5.0.9 build 140305 Hikvision Digital Technology DS-2CD4xx5 Series 5.4 Build 160421 Hikvision Digital Technology DS-2CD4xx5 Series 5.2 build 140721 Hikvision Digital Technology DS-2CD4x2xFWD Series 5.4 Build 160414 Hikvision Digital Technology DS-2CD4x2xFWD Series 5.2 build 140721 Hikvision Digital Technology DS-2CD2xx2FWD Series 5.4.4 Build 161125 Hikvision Digital Technology DS-2CD2xx2FWD Series 5.3.1 build 150410 Hikvision Digital Technology DS-2CD2xx2F-I Series 5.4 build 160530 Hikvision Digital Technology DS-2CD2xx2F-I Series 5.2 build 140721 Hikvision Digital Technology DS-2CD2xx0F-I Series 5.4 Build 160401 Hikvision Digital Technology DS-2CD2xx0F-I Series 5.2 build 140721 |
| Not Vulnerable: |
Hikvision Digital Technology DS-2DFx Series 5.4.9 Build 170123 Hikvision Digital Technology DS-2CD63xx Series 5.4.5 Build 170206 Hikvision Digital Technology DS-2CD4xx5 Series 5.4.5 Build 170302 Hikvision Digital Technology DS-2CD4x2xFWD Series 5.4.5 Build 170228 Hikvision Digital Technology DS-2CD2xx2FWD Series 5.4.5 Build 170124 Hikvision Digital Technology DS-2CD2xx2F-I Series 5.4.5 build 170123 Hikvision Digital Technology DS-2CD2xx0F-I Series 5.4.5 build 170123 |
Discussion
Multiple Hikvision Cameras ICSA-17-124-01 Multiple Securtiy Vulnerabilities
Multiple Hikvision Cameras are prone to an information-disclosure vulnerability and an authentication-bypass vulnerability.
An attacker can exploit this issue to gain sensitive information and to bypass authentication mechanism and compromise user accounts. Other attacks are also possible.
Multiple Hikvision Cameras are prone to an information-disclosure vulnerability and an authentication-bypass vulnerability.
An attacker can exploit this issue to gain sensitive information and to bypass authentication mechanism and compromise user accounts. Other attacks are also possible.
Exploit / POC
Multiple Hikvision Cameras ICSA-17-124-01 Multiple Securtiy Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].