EUVD-2026-75400
GHSA-xp4g-cgjh-m8f2
Severity by source
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Physical proximity required for NFC skim (AV:P); Crypto-1 cracking is low complexity with available tools; card reading yields high confidentiality impact, forgery yields low integrity impact.
Primary rating from Vendor (hikvision).
CVSS VectorVendor: hikvision
Lifecycle Timeline
2DescriptionCVE.org
There is an Improper Encryption Configuration Vulnerability in some Hikvision Intercom Products. This could allow attackers to forge M1 cards.
AnalysisAI
Improper encryption configuration across thirteen Hikvision video door station and intercom models enables physical-proximity attackers to forge MIFARE Classic (M1) access cards, bypassing the card-based authentication enforced by these devices. The vulnerability stems from weak or misconfigured Crypto-1 sector key handling in the card reader subsystem, allowing an attacker with commodity NFC tools to clone or synthesize valid credentials. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Physical proximity (under approximately 10 cm NFC range) to either a legitimate M1 card in transit or to the intercom card reader is required - there is no network exposure. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The physical access vector (AV:P) is the dominant risk-limiting factor: an attacker must be within NFC read range (typically under 10 cm) of either a legitimate card or the reader itself. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply firmware updates to the patched versions listed in the Hikvision security advisory (EUVD-2026-75400) at https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-intercom-products - specific fixed versions are identified per model (DS-KD8003 above V3.7.1, DS-KD8005 above V3.10.0, DS-KV8114 above V3.11.0, DS-KV6124/6134/6114 above V3.9.0, all other listed KV models above V3.7.0, DS-KV9503 above V2.3.13). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today