Wi Fi Series Camera
Monthly
Insufficient permission validation on management interfaces in Hikvision Wi-Fi series cameras allows authenticated low-privileged users to retrieve the device's Wi-Fi configuration via unauthorized API calls. The flaw stems from missing authorization checks on specific endpoints that expose network configuration data, potentially including SSID and pre-shared key material. Hikvision confirmed and addressed the issue in firmware V5.7.26; no public exploit or active exploitation is identified.
Insufficient permission validation on management interfaces in Hikvision Wi-Fi series cameras allows authenticated low-privileged users to retrieve the device's Wi-Fi configuration via unauthorized API calls. The flaw stems from missing authorization checks on specific endpoints that expose network configuration data, potentially including SSID and pre-shared key material. Hikvision confirmed and addressed the issue in firmware V5.7.26; no public exploit or active exploitation is identified.