Description
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.
Affected Platforms
Hikvision Ds-2Cd2027G2-L\(U\) FirmwareHikvision Ds-2Cd3556G2-IsHikvision Ds-2Cd3743G2-Izs FirmwareHikvision Ds-2Td1217B-6\/PaHikvision Ds-7608Ni-K1\/8P\/4GHikvision Ds-7108Ni-Q1 FirmwareHikvision Ds-2Cd2546G2-I\(S\) FirmwareHikvision Ds-2Cd2446G2-IHikvision Ds-2Df8442Ixs-Ael\(T5\)Hikvision Ds-2Cd2623G2-Izs Firmware