A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.
History

Thu, 06 Feb 2025 20:15:00 +0000

Type Values Removed Values Added
Metrics kev

{'dateAdded': '2022-01-10'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: hikvision

Published:

Updated: 2025-02-06T19:54:12.002Z

Reserved: 2021-07-08T00:00:00.000Z

Link: CVE-2021-36260

cve-icon Vulnrichment

Updated: 2024-08-04T00:54:50.746Z

cve-icon NVD

Status : Modified

Published: 2021-09-22T13:15:07.690

Modified: 2025-02-06T20:15:37.047

Link: CVE-2021-36260

cve-icon Redhat

No data.