CVE-2026-61391: Hikvision DS-2CD Series, грешка в паметта

Описание

Оригинално описание

There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers to cause device malfunction by sending specially crafted packets.

Засегнати продукти

• Hikvision DS-2CD Series: https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
• Hikvision DS-2DE Series: https://www.hikvision.com/en/support/download/firmware/security-firmware-download/

Вид слабост

• CWE-121 Препълване на буфера в стека

История

Други уязвимости в Hikvision DS-2CD Series

• 5.3CVE-2026-61392
• 7.7CVE-2026-61390
• 7.5CVE-2026-57600
• 6.6CVE-2026-57599

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-61391
• https://nvd.nist.gov/vuln/detail/CVE-2026-61391
• https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-cameras/