Към съдържанието
Търсене

CVE-2024-29949: Hikvision DS-7604NI-K1 / 4P(B), инжекция

7.2

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, с администраторски права и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

There is a command injection vulnerability in some Hikvision NVRs. This could allow an authenticated user with administrative rights to execute arbitrary commands.

Засегнати продукти

  • Hikvision DS-7604NI-K1 / 4P(B): V4.30.096build221220 and the versions prior to it
  • Hikvision DS-76xxNI-Mx: Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）
  • Hikvision DS-77xxNI-Mx: Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）
  • Hikvision DS-96xxxNI-Mxx: Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）
  • Hikvision DS-76xxNXI-Ix: Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）
  • Hikvision DS-77xxNXI-Ix: Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）
  • Hikvision DS-86xxNXI-Ix: Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）
  • Hikvision DS-96xxNXI-Ix: Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）
  • Hikvision iDS-76xxNXI-Mx: Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）
  • Hikvision iDS-77xxNXI-Mx: Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）
  • Hikvision iDS-96xxxMXI-Mxx: Versions after V5.00.000 (including V5.00.000) and before V5.02.006（not including V5.02.006）
  • Hikvision DS-7604NI-M1/4P: Versions after V5.00.000 (including V5.00.000) and before V5.01.070（not including V5.01.070）
  • hikvision: още 6 продукта, добавени от hikvision

    ds-7604ni-k1\/4p\(b\), ds-76xxnxi-lx, ds-77xxnxi-lx, ds-86xxnxi-lx, ds-96xxnxi-lx, ds-7604ni-m1\/4p

Вид слабост

История

  • 2 април 2024 Публикувано

Други уязвимости в Hikvision DS-7604NI-K1 / 4P(B)

Първоизточници

CVE-2024-29949: Hikvision DS-7604NI-K1 / 4P(B), инжекция | freedomonline.bg