EUVD-2026-47628
GHSA-fggv-cfcv-qhcf
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Network-reachable management interface requires no authentication; only partial memory disclosed with no integrity or availability impact, so C:L/I:N/A:N.
Primary rating from Vendor (hikvision).
CVSS VectorVendor: hikvision
Lifecycle Timeline
2DescriptionCVE.org
There is a information disclosure vulnerability in some Hikvision cameras, allowing unauthenticated attackers to obtain partial information from the device’s memory.
AnalysisAI
Unauthenticated remote information disclosure in Hikvision DS-2CD and DS-2DE series IP cameras exposes partial device memory contents to network-accessible attackers without any credentials. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms exploitation requires no authentication and no user interaction against default configurations, making the attack surface broad given the cameras' typical internet or LAN exposure. While confidentiality impact is rated Low (partial memory only), leaked memory may contain sensitive fragments such as session tokens or configuration data, and no public exploit or CISA KEV listing is confirmed at time of analysis.
Technical ContextAI
The affected products are Hikvision IP camera lines - DS-2CD series (fixed network cameras) and DS-2DE series (PTZ network cameras) - as confirmed by CPE strings cpe:2.3:a:hikvision:ds-2cd_series:*:*:*:*:*:*:*:* and cpe:2.3:a:hikvision:ds-2de_series:*:*:*:*:*:*:*:*. These are embedded Linux-based surveillance devices exposing HTTP/HTTPS management interfaces. No CWE was assigned, but the partial memory disclosure pattern is consistent with a buffer over-read (CWE-126) or improper restriction of operations within memory bounds (CWE-119), where an unauthenticated HTTP request triggers the device firmware to return more memory than intended. The '*' wildcard across all version fields in both CPEs indicates the full product families are implicated, though exact affected firmware revisions are not specified in the available intelligence.
RemediationAI
Consult the Hikvision security advisory at https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-cameras/ for exact patched firmware versions, as specific fix versions are not confirmed in the available data. As an interim compensating control, restrict network access to camera HTTP/HTTPS management interfaces using firewall rules or VLAN segmentation so only trusted administrative hosts can reach device web interfaces - this directly reduces the attack surface since AV:N exploitation requires network reachability. Avoid direct internet exposure of camera management ports; place cameras behind a VPN or zero-trust gateway if remote access is required. Note that blocking management interface access does not affect camera streaming functionality on separate ports. Do not rely solely on network isolation if cameras are already compromised, as memory disclosure may expose credentials usable for lateral movement.
More in Ds 2Cd Series
View allDenial of service (with potential memory corruption) in select Hikvision network cameras - specifically the DS-2CD and D
Information disclosure in the firmware of multiple Hikvision network camera families (DS-2CD, DS-2DE, DS-2DP, DS-2TD ser
Denial-of-service via stack-based buffer overflow affects Hikvision DS-2CD and DS-2DE series IP cameras, where an authen
Privilege escalation in Hikvision DS-2CD series IP cameras allows an SSH-authenticated attacker to gain full administrat
Same weakness CWE-200 – Information Exposure
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today