EUVD-2026-47625
GHSA-gr8g-8h3g-v65p
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Remote, unauthenticated, low-complexity access (AV:N/AC:L/PR:N/UI:N) but description limits disclosure to 'partial' data, so C:L rather than the vendor's C:H, with no integrity/availability impact.
Primary rating from Vendor (hikvision).
CVSS VectorVendor: hikvision
Lifecycle Timeline
2DescriptionCVE.org
Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data.
AnalysisAI
Information disclosure in the firmware of multiple Hikvision network camera families (DS-2CD, DS-2DE, DS-2DP, DS-2TD series) allows remote unauthenticated attackers to retrieve partial sensitive data by sending requests with improperly validated input parameters. The flaw was self-reported by Hikvision and rated CVSS 7.5 (confidentiality-only impact); no public exploit identified at time of analysis. Because these cameras are frequently internet-exposed, the network-reachable, no-authentication nature of the issue makes it a meaningful exposure risk despite the absence of integrity or availability impact.
Technical ContextAI
The affected assets are IP-based surveillance devices: the DS-2CD series (fixed network/box and dome cameras), DS-2DE and DS-2DP series (PTZ / positioning speed domes), and DS-2TD series (thermal/bi-spectrum cameras), all running Hikvision embedded firmware and exposing HTTP(S)/web-service management interfaces. The root cause is insufficient validation of input parameters on one of these interfaces, which maps to the CWE-20 (Improper Input Validation) / CWE-200 (Exposure of Sensitive Information) class even though the record lists CWE as N/A. Input-validation gaps of this kind typically let an attacker manipulate a parameter (e.g., a path, identifier, or index) so the device returns data it should not, without the parameter being bounds- or authorization-checked first.
RemediationAI
Apply the patched firmware for your specific camera model as directed by the Hikvision security advisory (https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-cameras/); patch available per vendor advisory, but no exact fixed firmware version was provided in the input, so match the fixed build to your exact model on the advisory page. Until firmware is updated, remove the cameras and their web/management interfaces from direct internet exposure - place them on an isolated VLAN, block inbound access to the HTTP/HTTPS management ports (typically 80/443/8000) from untrusted networks, and require VPN for remote administration; the trade-off is loss of direct remote/cloud viewing until reconfigured. Additionally restrict management access to known administrator IP ranges and monitor device logs for anomalous parameter-based requests, accepting that log fidelity on embedded devices is limited.
More in Ds 2Cd Series
View allDenial of service (with potential memory corruption) in select Hikvision network cameras - specifically the DS-2CD and D
Denial-of-service via stack-based buffer overflow affects Hikvision DS-2CD and DS-2DE series IP cameras, where an authen
Privilege escalation in Hikvision DS-2CD series IP cameras allows an SSH-authenticated attacker to gain full administrat
Unauthenticated remote information disclosure in Hikvision DS-2CD and DS-2DE series IP cameras exposes partial device me
Same weakness CWE-20 – Improper Input Validation
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today