Exploit for #VU60887 OS Command Injection in Hikvision Hardware solutions

Exploit for #VU60887 OS Command Injection in Hikvision Hardware solutions

Published: 2022-02-25 | Updated: 2023-07-19

Vulnerability identifier: #VU60887

Vulnerability risk: High

CVSSv3.1: 9.4 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C]

CVE-ID: CVE-2021-36260

CWE-ID: CWE-78

Exploitation vector: Network

Exploits in database: 9

July 19, 2023
- hikvision_brute (Brute Hikvision CAMS with CVE-2021-36260 Exploit) [Github]
August 3, 2022
- CVE-2021-36260 (海康威视RCE漏洞批量检测和利用工具) [Github]
July 14, 2022
- CheckHKRCE (CVE-2021-36260) [Github]
May 16, 2022
- CVE-2021-36260-metasploit (the metasploit script(POC) about CVE-2021-36260 ) [Github]
May 12, 2022
- Hikvision IP Camera Unauthenticated Command Injection [Metasploit]
March 20, 2022
- CVE-2021-36260 (CVE-2021-36260) [Github]
March 1, 2022
- Hikvision IP Camera Unauthenticated Command Injection [Packet Storm]
February 25, 2022
- Hikvision Web Server Build 210702 - Command Injection [Exploit-DB]
- CVE-2021-36260 (command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious comm [Github]

Impact: Code execution

Vulnerable software:
DS-2CVxxx1
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CVxxx6
Hardware solutions / Office equipment, IP-phones, print servers
HWI-xxxx
Hardware solutions / Office equipment, IP-phones, print servers
IPC-xxxx
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD1xx1
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD1x23G0E(C)
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD1x43(B)
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD1x43(C)
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD1x43G0E
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD1x53(B)
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD1x53(C)
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD1xx7G0
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD2xx6G2
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD2xx6G2(C)
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD2xx7G2
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD2xx7G2(C)
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD2x21G0(C)
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD2x21G1(C)
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD2xx3G2
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD3xx6G2
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD3xx6G2(C)
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD3xx7G2
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD3xx7G2(C)
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD3xx7G0E
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD3x21G0
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD3x21G0(C)
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD3x51G0(C)
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD3xx3G2
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD4xx0
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD4xx6
Hardware solutions / Office equipment, IP-phones, print servers
iDS-2XM6810
Hardware solutions / Office equipment, IP-phones, print servers
iDS-2CD6810
Hardware solutions / Office equipment, IP-phones, print servers
DS-2XE62x2F(D)
Hardware solutions / Office equipment, IP-phones, print servers
DS-2XC66x5G0
Hardware solutions / Office equipment, IP-phones, print servers
DS-2XE64x2F(B)
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD8Cx6G0
Hardware solutions / Office equipment, IP-phones, print servers
(i)DS-2PTxxxx
Hardware solutions / Office equipment, IP-phones, print servers
(i)DS-2SE7xxxx
Hardware solutions / Office equipment, IP-phones, print servers
DS-2DYHxxxx
Hardware solutions / Office equipment, IP-phones, print servers
DS-2DY9xxxx
Hardware solutions / Office equipment, IP-phones, print servers
PTZ-Nxxxx
Hardware solutions / Office equipment, IP-phones, print servers
HWP-Nxxxx
Hardware solutions / Office equipment, IP-phones, print servers
DS-2DF5xxxx
Hardware solutions / Office equipment, IP-phones, print servers
DS-2DF6xxxx
Hardware solutions / Office equipment, IP-phones, print servers
DS-2DF6xxxx-Cx
Hardware solutions / Office equipment, IP-phones, print servers
DS-2DF7xxxx
Hardware solutions / Office equipment, IP-phones, print servers
DS-2DF8xxxx
Hardware solutions / Office equipment, IP-phones, print servers
DS-2DF9xxxx
Hardware solutions / Office equipment, IP-phones, print servers
iDS-2PT9xxxx
Hardware solutions / Office equipment, IP-phones, print servers
iDS-2SK7xxxx
Hardware solutions / Office equipment, IP-phones, print servers
iDS-2SK8xxxx
Hardware solutions / Office equipment, IP-phones, print servers
iDS-2SR8xxxx
Hardware solutions / Office equipment, IP-phones, print servers
iDS-2VSxxxx
Hardware solutions / Office equipment, IP-phones, print servers
DS-2TBxxx
Hardware solutions / Office equipment, IP-phones, print servers
DS-Bxxxx
Hardware solutions / Office equipment, IP-phones, print servers
DS-2TDxxxxB
Hardware solutions / Office equipment, IP-phones, print servers
DS-2TD1xxx-xx
Hardware solutions / Office equipment, IP-phones, print servers
DS-2TD2xxx-xx
Hardware solutions / Office equipment, IP-phones, print servers
DS-2TD41xx-xx/Wx
Hardware solutions / Office equipment, IP-phones, print servers
DS-2TD62xx-xx/Wx
Hardware solutions / Office equipment, IP-phones, print servers
DS-2TD81xx-xx/Wx
Hardware solutions / Office equipment, IP-phones, print servers
DS-2TD4xxx-xx/V2
Hardware solutions / Office equipment, IP-phones, print servers
DS-2TD62xx-xx/V2
Hardware solutions / Office equipment, IP-phones, print servers
DS-2TD81xx-xx/V2
Hardware solutions / Office equipment, IP-phones, print servers
DS-76xxNI-K1xx(C)
Hardware solutions / Office equipment, IP-phones, print servers
DS-76xxNI-Qxx(C)
Hardware solutions / Office equipment, IP-phones, print servers
DS-HiLookI-NVR-1xxMHxx-C(C)
Hardware solutions / Office equipment, IP-phones, print servers
DS-HiLookI-NVR-2xxMHxx-C(C)
Hardware solutions / Office equipment, IP-phones, print servers
DS-HiWatchI-HWN-41xxMHxx(C)
Hardware solutions / Office equipment, IP-phones, print servers
DS-HiWatchI-HWN-42xxMHxx(C)
Hardware solutions / Office equipment, IP-phones, print servers
DS-71xxNI-Q1xx(C)
Hardware solutions / Office equipment, IP-phones, print servers
DS-HiLookI-NVR-1xxMHxx-D(C)
Hardware solutions / Office equipment, IP-phones, print servers
DS-HiLookI-NVR-1xxHxx-D(C)
Hardware solutions / Office equipment, IP-phones, print servers
DS-HiWatchI-HWN-21xxMHxx(C)
Hardware solutions / Office equipment, IP-phones, print servers
DS-HiWatchI-HWN-21xxHxx(C)
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD1x23G0
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD2xx1G0
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD2xx1G1
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD2x27G1
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD2x27G3E
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD4xx6FWD (Non-ANPR)
Hardware solutions / Office equipment, IP-phones, print servers
DS-2CD4xx5G0
Hardware solutions / Office equipment, IP-phones, print servers
DS-2XE6xx5G0
Hardware solutions / Office equipment, IP-phones, print servers
DS-2XE6xx2F
Hardware solutions / Office equipment, IP-phones, print servers
DS-2XM6xx2FWD
Hardware solutions / Office equipment, IP-phones, print servers
DS-2XM6xx2G0
Hardware solutions / Office equipment, IP-phones, print servers
(i)DS-2DExxxx
Hardware solutions / Office equipment, IP-phones, print servers

Vendor: Hikvision