CVE-2026-61392: Hikvision DS-2CD Series, изтичане на данни

Описание

Оригинално описание

There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain partial information from the device’s memory.

Засегнати продукти

• Hikvision DS-2CD Series: https://www.hikvision.com/en/support/download/firmware/security-firmware-download/
• Hikvision DS-2DE Series: https://www.hikvision.com/en/support/download/firmware/security-firmware-download/

Вид слабост

• CWE-200 Разкриване на чувствителна информация пред неоторизирана страна

История

Други уязвимости в Hikvision DS-2CD Series

• 7.2CVE-2026-61391
• 7.7CVE-2026-61390
• 7.5CVE-2026-57600
• 6.6CVE-2026-57599

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-61392
• https://nvd.nist.gov/vuln/detail/CVE-2026-61392
• https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-cameras/