Known vulnerabilities in Hikvision DVR/NVR Firmware

Vendor: Hikvision
Software: Hikvision DVR/NVR Firmware
Software CPE: cpe:2.3:h:hikvision:hikvision_dvr_nvr_firmware:*:*:*:*:*:*:*:*
Website: https://www.hikvision.com/en/index.html
Total vulnerabilities: 12
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Hikvision DVR/NVR Firmware Hikvision DVR/NVR Firmware is affected by 12 known vulnerabilities: 1 high, 1 medium, 10 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU48578 - Exposure of sensitive information to an unauthorized actor
CVE-2020-7057		 CWE-200 Low
No
No
 - 14.01.2020 SB20200114126
#VU9539 - Password in Configuration File
CVE-2017-7923		 CWE-260 Low
No
No
 - 05.12.2017 SB2017031001
#VU9538 - Improper Authentication
CVE-2017-7921		 CWE-287 Medium
Available
Exploited
 - 05.12.2017 SB2017031001
#VU9537 - Buffer overflow
CVE-2015-4409		 CWE-120 Low
No
No
 - 05.12.2017 SB2015110901
#VU9536 - Buffer overflow
CVE-2015-4408		 CWE-120 Low
No
No
 - 05.12.2017 SB2015110901
#VU9535 - Buffer overflow
CVE-2015-4407		 CWE-120 Low
No
No
 - 05.12.2017 SB2015110901
#VU9534 - Buffer overflow
CVE-2014-4880		 CWE-120 Low
Available
No
 - 05.12.2017 SB2014112801
#VU9533 - Buffer overflow
CVE-2014-4879		 CWE-120 Low
No
No
 - 05.12.2017 SB2014112801
#VU9532 - Buffer overflow
CVE-2014-4878		 CWE-120 Low
No
No
 - 05.12.2017 SB2014112801
#VU9531 - Exposure of sensitive information to an unauthorized actor
CVE-2013-4975		 CWE-200 Low
Available
No
 - 05.12.2017 SB2013080603
#VU9530 - Use of Hard-coded Credentials
CVE-2013-4976		 CWE-798 Low
Available
No
 - 05.12.2017 SB2013080603
#VU9529 - Buffer overflow
CVE-2013-4977		 CWE-120 High
Available
No
 - 05.12.2017 SB2013080603