Ds Kv6114
Monthly
Improper encryption configuration across thirteen Hikvision video door station and intercom models enables physical-proximity attackers to forge MIFARE Classic (M1) access cards, bypassing the card-based authentication enforced by these devices. The vulnerability stems from weak or misconfigured Crypto-1 sector key handling in the card reader subsystem, allowing an attacker with commodity NFC tools to clone or synthesize valid credentials. With a forged card, an attacker can gain unauthorized physical entry to premises protected by these intercoms. No public exploit or CISA KEV listing is present, but MIFARE Classic attack tooling (Proxmark, libnfc) is mature and widely available.
Improper encryption configuration across thirteen Hikvision video door station and intercom models enables physical-proximity attackers to forge MIFARE Classic (M1) access cards, bypassing the card-based authentication enforced by these devices. The vulnerability stems from weak or misconfigured Crypto-1 sector key handling in the card reader subsystem, allowing an attacker with commodity NFC tools to clone or synthesize valid credentials. With a forged card, an attacker can gain unauthorized physical entry to premises protected by these intercoms. No public exploit or CISA KEV listing is present, but MIFARE Classic attack tooling (Proxmark, libnfc) is mature and widely available.