CVE-2021-36260

Published Sep 22, 2021 CVSS 3.1 · 9.8 Critical EPSS 99.9% KEV · Listed
Description
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Metrics epss

{'score': 0.94399}

epss

{'score': 0.94436}

Type Values Removed Values Added
Metrics kev

{'dateAdded': '2022-01-10'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Subscriptions

Hikvision Ds-2cd2021g1-i\(w\) Ds-2cd2021g1-i\(w\) Firmware Ds-2cd2023g2-i\(u\) Ds-2cd2023g2-i\(u\) Firmware Ds-2cd2026g2-iu\/sl Ds-2cd2026g2-iu\/sl Firmware Ds-2cd2027g2-l\(u\) Ds-2cd2027g2-l\(u\) Firmware Ds-2cd2027g2-lu\/sl Ds-2cd2027g2-lu\/sl Firmware Ds-2cd2043g2-i\(u\) Ds-2cd2043g2-i\(u\) Firmware Ds-2cd2046g2-iu\/sl Ds-2cd2046g2-iu\/sl Firmware Ds-2cd2047g2-l\(u\) Ds-2cd2047g2-l\(u\) Firmware Ds-2cd2063g2-i\(u\) Ds-2cd2063g2-i\(u\) Firmware Ds-2cd2066g2-i\(u\) Ds-2cd2066g2-i\(u\) Firmware Ds-2cd2066g2-iu\/sl Ds-2cd2066g2-iu\/sl Firmware Ds-2cd2083g2-i\(u\) Ds-2cd2083g2-i\(u\) Firmware Ds-2cd2086g2-i\(u\) Ds-2cd2086g2-i\(u\) Firmware Ds-2cd2086g2-iu\/sl Ds-2cd2086g2-iu\/sl Firmware Ds-2cd2087g2-l\(u\) Ds-2cd2087g2-l\(u\) Firmware Ds-2cd2121g0-i\(w\)\(s\) Ds-2cd2121g0-i\(w\)\(s\) Firmware Ds-2cd2121g1 Ds-2cd2121g1-i\(w\) Ds-2cd2121g1-i\(w\) Firmware Ds-2cd2121g1-idw Ds-2cd2121g1-idw Firmware Ds-2cd2121g1 Firmware Ds-2cd2123g2-i\(s\) Ds-2cd2123g2-i\(s\) Firmware Ds-2cd2123g2-iu Ds-2cd2123g2-iu Firmware Ds-2cd2127g2-\(-su\) Ds-2cd2127g2-\(-su\) Firmware Ds-2cd2143g2-i\(s\) Ds-2cd2143g2-i\(s\) Firmware Ds-2cd2143g2-iu Ds-2cd2143g2-iu Firmware Ds-2cd2147g2-l\(su\) Ds-2cd2147g2-l\(su\) Firmware Ds-2cd2163g2-i\(s\) Ds-2cd2163g2-i\(s\) Firmware Ds-2cd2163g2-iu Ds-2cd2163g2-iu Firmware Ds-2cd2166g2-i\(su\) Ds-2cd2166g2-i\(su\) Firmware Ds-2cd2183g2-i\(s\) Ds-2cd2183g2-i\(s\) Firmware Ds-2cd2183g2-i\(u\) Ds-2cd2183g2-i\(u\) Firmware Ds-2cd2183g2-iu Ds-2cd2183g2-iu Firmware Ds-2cd2186g2-i\(su\) Ds-2cd2186g2-i\(su\) Firmware Ds-2cd2186g2-isu Ds-2cd2186g2-isu Firmware Ds-2cd2321g0-i\/nf Ds-2cd2321g0-i\/nf Firmware Ds-2cd2323g2-i\(u\) Ds-2cd2323g2-i\(u\) Firmware Ds-2cd2326g2-isu\/sl Ds-2cd2326g2-isu\/sl Firmware Ds-2cd2327g2-l\(u\) Ds-2cd2327g2-l\(u\) Firmware Ds-2cd2343g2-i\(u\) Ds-2cd2343g2-i\(u\) Firmware Ds-2cd2346g2-isu\/sl Ds-2cd2346g2-isu\/sl Firmware Ds-2cd2347g2-l\(u\) Ds-2cd2347g2-l\(u\) Firmware Ds-2cd2347g2-lsu\/sl Ds-2cd2347g2-lsu\/sl Firmware Ds-2cd2363g2-i\(u\) Ds-2cd2363g2-i\(u\) Firmware Ds-2cd2366g2-i\(u\) Ds-2cd2366g2-i\(u\) Firmware Ds-2cd2366g2-isu\/sl Ds-2cd2366g2-isu\/sl Firmware Ds-2cd2383g2-i\(u\) Ds-2cd2383g2-i\(u\) Firmware Ds-2cd2386g2-i\(u\) Ds-2cd2386g2-i\(u\) Firmware Ds-2cd2386g2-isu\/sl Ds-2cd2386g2-isu\/sl Firmware Ds-2cd2387g2-l\(u\) Ds-2cd2387g2-l\(u\) Firmware Ds-2cd2421g0-i\(d\)\(w\) Ds-2cd2421g0-i\(d\)\(w\) Firmware Ds-2cd2421g0-i\(d\)w Ds-2cd2421g0-i\(d\)w Firmware Ds-2cd2426g2-i Ds-2cd2426g2-i Firmware Ds-2cd2446g2-i Ds-2cd2446g2-i Firmware Ds-2cd2523g2-i\(s\) Ds-2cd2523g2-i\(s\) Firmware Ds-2cd2523g2-i\(u\) Ds-2cd2523g2-i\(u\) Firmware Ds-2cd2526g2-i\(s\) Ds-2cd2526g2-i\(s\) Firmware Ds-2cd2526g2-is Ds-2cd2526g2-is Firmware Ds-2cd2527g2-ls Ds-2cd2527g2-ls Firmware Ds-2cd2543g2-i\(ws\) Ds-2cd2543g2-i\(ws\) Firmware Ds-2cd2546g2-i\(s\) Ds-2cd2546g2-i\(s\) Firmware Ds-2cd2547g2-ls Ds-2cd2547g2-ls Firmware Ds-2cd2547g2-lzs Ds-2cd2547g2-lzs Firmware Ds-2cd2563g2-i\(s\) Ds-2cd2563g2-i\(s\) Firmware Ds-2cd2566g2-i\(s\) Ds-2cd2566g2-i\(s\) Firmware Ds-2cd2583g2-i\(s\) Ds-2cd2583g2-i\(s\) Firmware Ds-2cd2586g2-i\(s\) Ds-2cd2586g2-i\(s\) Firmware Ds-2cd2621g0-i\(z\)\(s\) Ds-2cd2621g0-i\(z\)\(s\) Firmware Ds-2cd2623g2-izs Ds-2cd2623g2-izs Firmware Ds-2cd2626g2-izsu\/sl Ds-2cd2626g2-izsu\/sl Firmware Ds-2cd2643g2-izs Ds-2cd2643g2-izs Firmware Ds-2cd2646g2-izsu\/sl Ds-2cd2646g2-izsu\/sl Firmware Ds-2cd2663g2-izs Ds-2cd2663g2-izs Firmware Ds-2cd2666g2-izs Ds-2cd2666g2-izs Firmware Ds-2cd2666g2-izsu\/sl Ds-2cd2666g2-izsu\/sl Firmware Ds-2cd2683g2-izs Ds-2cd2683g2-izs Firmware Ds-2cd2686g2-izs Ds-2cd2686g2-izs Firmware Ds-2cd2686g2-izsu\/sl Ds-2cd2686g2-izsu\/sl Firmware Ds-2cd2721g0-i\(z\)\(s\) Ds-2cd2721g0-i\(z\)\(s\) Firmware Ds-2cd2723g2-izs Ds-2cd2723g2-izs Firmware Ds-2cd2743g2-izs Ds-2cd2743g2-izs Firmware Ds-2cd2763g2-izs Ds-2cd2763g2-izs Firmware Ds-2cd2766g2-izs Ds-2cd2766g2-izs Firmware Ds-2cd2783g2-izs Ds-2cd2783g2-izs Firmware Ds-2cd2786g2-izs Ds-2cd2786g2-izs Firmware Ds-2cd3023g2-iu Ds-2cd3023g2-iu Firmware Ds-2cd3026g2-is Ds-2cd3026g2-is Firmware Ds-2cd3026g2-iu\/sl Ds-2cd3026g2-iu\/sl Firmware Ds-2cd3043g2-iu Ds-2cd3043g2-iu Firmware Ds-2cd3047g2-ls Ds-2cd3047g2-ls Firmware Ds-2cd3056g2-is Ds-2cd3056g2-is Firmware Ds-2cd3056g2-iu\/sl Ds-2cd3056g2-iu\/sl Firmware Ds-2cd3056g2iu\/sl Ds-2cd3056g2iu\/sl Firmware Ds-2cd3063g2-iu Ds-2cd3063g2-iu Firmware Ds-2cd3086g2-is Ds-2cd3086g2-is Firmware Ds-2cd3123g2-i\(s\)u Ds-2cd3123g2-i\(s\)u Firmware Ds-2cd3126g2-is Ds-2cd3126g2-is\(u\) Ds-2cd3126g2-is\(u\) Firmware Ds-2cd3126g2-is Firmware Ds-2cd3143g2-i\(s\)u Ds-2cd3143g2-i\(s\)u Firmware Ds-2cd3156g2-is Ds-2cd3156g2-is\(u\) Ds-2cd3156g2-is\(u\) Firmware Ds-2cd3156g2-is Firmware Ds-2cd3163g2-i\(s\)u Ds-2cd3163g2-i\(s\)u Firmware Ds-2cd3186g2-is\(u\) Ds-2cd3186g2-is\(u\) Firmware Ds-2cd3323g2-iu Ds-2cd3323g2-iu Firmware Ds-2cd3326g2-isu\/sl Ds-2cd3326g2-isu\/sl Firmware Ds-2cd3343g2-iu Ds-2cd3343g2-iu Firmware Ds-2cd3347g2-ls\(u\) Ds-2cd3347g2-ls\(u\) Firmware Ds-2cd3356g2-is Ds-2cd3356g2-is\(u\) Ds-2cd3356g2-is\(u\) Firmware Ds-2cd3356g2-is Firmware Ds-2cd3356g2-isu\/sl Ds-2cd3356g2-isu\/sl Firmware Ds-2cd3363g2-iu Ds-2cd3363g2-iu Firmware Ds-2cd3386g2-is Ds-2cd3386g2-is\(u\) Ds-2cd3386g2-is\(u\) Firmware Ds-2cd3386g2-is Firmware Ds-2cd3523g2-is Ds-2cd3523g2-is Firmware Ds-2cd3526g2-is Ds-2cd3526g2-is Firmware Ds-2cd3543g2-is Ds-2cd3543g2-is Firmware Ds-2cd3547g2-ls Ds-2cd3547g2-ls Firmware Ds-2cd3556g2-is Ds-2cd3556g2-is Firmware Ds-2cd3563g2-is Ds-2cd3563g2-is Firmware Ds-2cd3586g2-is Ds-2cd3586g2-is Firmware Ds-2cd3623g2-izs Ds-2cd3623g2-izs Firmware Ds-2cd3626g2-izs Ds-2cd3626g2-izs Firmware Ds-2cd3643g2-izs Ds-2cd3643g2-izs Firmware Ds-2cd3656g2-izs Ds-2cd3656g2-izs Firmware Ds-2cd3663g2-izs Ds-2cd3663g2-izs Firmware Ds-2cd3686g2-izs Ds-2cd3686g2-izs Firmware Ds-2cd3723g2-izs Ds-2cd3723g2-izs Firmware Ds-2cd3726g2-izs Ds-2cd3726g2-izs Firmware Ds-2cd3743g2-izs Ds-2cd3743g2-izs Firmware Ds-2cd3756g2-izs Ds-2cd3756g2-izs Firmware Ds-2cd3763g2-izs Ds-2cd3763g2-izs Firmware Ds-2cd3786g2-izs Ds-2cd3786g2-izs Firmware Ds-2df5225x-ae3\(t3\) Ds-2df5225x-ae3\(t3\) Firmware Ds-2df5225x-ael\(t3\) Ds-2df5225x-ael\(t3\) Firmware Ds-2df5232x-ae3\)t3\) Ds-2df5232x-ae3\)t3\) Firmware Ds-2df5232x-ael\(t3\) Ds-2df5232x-ael\(t3\) Firmware Ds-2df6a225x-ael\)t3\) Ds-2df6a225x-ael\)t3\) Firmware Ds-2df6a236x-ael\(t3\) Ds-2df6a236x-ael\(t3\) Firmware Ds-2df6a425x-ael\(t3\) Ds-2df6a425x-ael\(t3\) Firmware Ds-2df6a436x-ael\(t3\) Ds-2df6a436x-ael\(t3\) Firmware Ds-2df6a436x-ael\(t5\) Ds-2df6a436x-ael\(t5\) Firmware Ds-2df6a436x-aely\(t5\) Ds-2df6a436x-aely\(t5\) Firmware Ds-2df6a825x-ael Ds-2df6a825x-ael Firmware Ds-2df6a836x-ael\(t5\) Ds-2df6a836x-ael\(t5\) Firmware Ds-2df7225ix-ael\(t3\) Ds-2df7225ix-ael\(t3\) Firmware Ds-2df7225ix-aelw\(t3\) Ds-2df7225ix-aelw\(t3\) Firmware Ds-2df7232ix-ael\(t3\) Ds-2df7232ix-ael\(t3\) Firmware Ds-2df7232ix-aelw\(t3\) Ds-2df7232ix-aelw\(t3\) Firmware Ds-2df8225ih-ael Ds-2df8225ih-ael\(w\) Ds-2df8225ih-ael\(w\) Firmware Ds-2df8225ih-ael Firmware Ds-2df8225ix-ael\(t3\) Ds-2df8225ix-ael\(t3\) Firmware Ds-2df8225ix-ael\(t5\) Ds-2df8225ix-ael\(t5\) Firmware Ds-2df8225ix-aelw\(t3\) Ds-2df8225ix-aelw\(t3\) Firmware Ds-2df8225ix-aelw\(t5\) Ds-2df8225ix-aelw\(t5\) Firmware Ds-2df8236i5x-aelw Ds-2df8236i5x-aelw Firmware Ds-2df8242i5x-ael\(t3\) Ds-2df8242i5x-ael\(t3\) Firmware Ds-2df8242i5x-aelw\(t3\) Ds-2df8242i5x-aelw\(t3\) Firmware Ds-2df8242i5x-aelw\(t5\) Ds-2df8242i5x-aelw\(t5\) Firmware Ds-2df8242ix-ael\(t5\) Ds-2df8242ix-ael\(t5\) Firmware Ds-2df8242ix-aelw\(t3\) Ds-2df8242ix-aelw\(t3\) Firmware Ds-2df8242ix-aely\(t3\) Ds-2df8242ix-aely\(t3\) Firmware Ds-2df8250i8x-ael\(t3\) Ds-2df8250i8x-ael\(t3\) Firmware Ds-2df8425ix-ael\(t3\) Ds-2df8425ix-ael\(t3\) Firmware Ds-2df8425ix-ael\(t5\) Ds-2df8425ix-ael\(t5\) Firmware Ds-2df8425ix-aelw\(t3\) Ds-2df8425ix-aelw\(t3\) Firmware Ds-2df8425ix-aelw\(t5\) Ds-2df8425ix-aelw\(t5\) Firmware Ds-2df8436i5x-aelw\(t3\) Ds-2df8436i5x-aelw\(t3\) Firmware Ds-2df8442ixs-ael\(t5\) Ds-2df8442ixs-ael\(t5\) Firmware Ds-2df8442ixs-aelw\(t2\) Ds-2df8442ixs-aelw\(t2\) Firmware Ds-2df8442ixs-aelw\(t5\) Ds-2df8442ixs-aelw\(t5\) Firmware Ds-2df8442ixs-aelwy\(t5\) Ds-2df8442ixs-aelwy\(t5\) Firmware Ds-2df8442ixs-aely\(t5\) Ds-2df8442ixs-aely\(t5\) Firmware Ds-2df8a442ixs-ael\(t2\) Ds-2df8a442ixs-ael\(t2\) Firmware Ds-2df8a442ixs-ael\(t5\) Ds-2df8a442ixs-ael\(t5\) Firmware Ds-2df8a442ixs-aely\(t5\) Ds-2df8a442ixs-aely\(t5\) Firmware Ds-2df8a442ixs-af\/sp\(t5\) Ds-2df8a442ixs-af\/sp\(t5\) Firmware Ds-2df8a442nxs-ael\(t5\) Ds-2df8a442nxs-ael\(t5\) Firmware Ds-2df8a842ixs-ael\(t5\) Ds-2df8a842ixs-ael\(t5\) Firmware Ds-2dy9236i8x-a Ds-2dy9236i8x-a\(t3\) Ds-2dy9236i8x-a\(t3\) Firmware Ds-2dy9236i8x-a Firmware Ds-2dy9236ix-a\(t3\) Ds-2dy9236ix-a\(t3\) Firmware Ds-2dy9236x-a\(t3\) Ds-2dy9236x-a\(t3\) Firmware Ds-2dy9240ix-a\(t5\) Ds-2dy9240ix-a\(t5\) Firmware Ds-2dy92500x-a\(t5\) Ds-2dy92500x-a\(t5\) Firmware Ds-2dy9250izs-a\(t5\) Ds-2dy9250izs-a\(t5\) Firmware Ds-2dyh2a0ixs-d\(t2\) Ds-2dyh2a0ixs-d\(t2\) Firmware Ds-2td1117-2\/pa Ds-2td1117-2\/pa Firmware Ds-2td1117-3\/pa Ds-2td1117-3\/pa Firmware Ds-2td1117-6\/pa Ds-2td1117-6\/pa Firmware Ds-2td1217b-3\/pa Ds-2td1217b-3\/pa Firmware Ds-2td1217b-6\/pa Ds-2td1217b-6\/pa Firmware Ds-2td4136t-9 Ds-2td4136t-9 Firmware Ds-2td4137-25\/w Ds-2td4137-25\/w Firmware Ds-2td4137-50\/w Ds-2td4137-50\/w Firmware Ds-2td4166t-9 Ds-2td4166t-9 Firmware Ds-2td4167-25\/w Ds-2td4167-25\/w Firmware Ds-2td4167-50\/w Ds-2td4167-50\/w Firmware Ds-2td6236t-50h2l Ds-2td6236t-50h2l Firmware Ds-2td6237-50h4l\/w Ds-2td6237-50h4l\/w Firmware Ds-2td6237-75c4l\/w Ds-2td6237-75c4l\/w Firmware Ds-2td6266t-25h2l Ds-2td6266t-25h2l Firmware Ds-2td6266t-50h2l Ds-2td6266t-50h2l Firmware Ds-2td6267-100c4l\/w Ds-2td6267-100c4l\/w Firmware Ds-2td6267-100c4l\/wy Ds-2td6267-100c4l\/wy Firmware Ds-2td6267-50h4l\/w Ds-2td6267-50h4l\/w Firmware Ds-2td6267-75c4l\/w Ds-2td6267-75c4l\/w Firmware Ds-2td6267-75c4l\/wy Ds-2td6267-75c4l\/wy Firmware Ds-2td8166-100c2f\/v2 Ds-2td8166-100c2f\/v2 Firmware Ds-2td8166-150ze2f\/v2 Ds-2td8166-150ze2f\/v2 Firmware Ds-2td8166-150zh2f\/v2 Ds-2td8166-150zh2f\/v2 Firmware Ds-2td8166-180ze2f\/v2 Ds-2td8166-180ze2f\/v2 Firmware Ds-2td8166-75c2f\/v2 Ds-2td8166-75c2f\/v2 Firmware Ds-2td8167-150zc4f\/w Ds-2td8167-150zc4f\/w Firmware Ds-2td8167-190ze2f\/w Ds-2td8167-190ze2f\/w Firmware Ds-2td8167-190ze2f\/wy Ds-2td8167-190ze2f\/wy Firmware Ds-2td8167-230zg2f\/w Ds-2td8167-230zg2f\/w Firmware Ds-2td8167-230zg2f\/wy Ds-2td8167-230zg2f\/wy Firmware Ds-2xe6242f-is\/316l\(b\) Ds-2xe6242f-is\/316l\(b\) Firmware Ds-2xe6422fwd-izhrs Ds-2xe6422fwd-izhrs Firmware Ds-2xe6442f-izhrs\(b\) Ds-2xe6442f-izhrs\(b\) Firmware Ds-2xe6452f-izh\(r\)s Ds-2xe6452f-izh\(r\)s Firmware Ds-2xe6482f-izhrs Ds-2xe6482f-izhrs Firmware Ds-7104ni-q1 Ds-7104ni-q1\/4p Ds-7104ni-q1\/4p\/m Ds-7104ni-q1\/4p\/m Firmware Ds-7104ni-q1\/4p Firmware Ds-7104ni-q1\/m Ds-7104ni-q1\/m Firmware Ds-7104ni-q1 Firmware Ds-7108ni-q1 Ds-7108ni-q1\/8p Ds-7108ni-q1\/8p\/m Ds-7108ni-q1\/8p\/m Firmware Ds-7108ni-q1\/8p Firmware Ds-7108ni-q1\/m Ds-7108ni-q1\/m Firmware Ds-7108ni-q1 Firmware Ds-7604ni-k1 Ds-7604ni-k1\/4p\/4g Ds-7604ni-k1\/4p\/4g Firmware Ds-7604ni-k1 Firmware Ds-7604ni-q1 Ds-7604ni-q1\/4p Ds-7604ni-q1\/4p Firmware Ds-7604ni-q1 Firmware Ds-7608ni-k1 Ds-7608ni-k1\/4g Ds-7608ni-k1\/4g Firmware Ds-7608ni-k1\/8p Ds-7608ni-k1\/8p\/4g Ds-7608ni-k1\/8p\/4g Firmware Ds-7608ni-k1\/8p Firmware Ds-7608ni-k1 Firmware Ds-7608ni-q1 Ds-7608ni-q1\/8p Ds-7608ni-q1\/8p Firmware Ds-7608ni-q1 Firmware Ds-7608ni-q2 Ds-7608ni-q2\/8p Ds-7608ni-q2\/8p Firmware Ds-7608ni-q2 Firmware Ds-760ni-k1\/4p Ds-760ni-k1\/4p Firmware Ds-7616ni-k1 Ds-7616ni-k1 Firmware Ds-7616ni-q1 Ds-7616ni-q1 Firmware Ds-7616ni-q2 Ds-7616ni-q2\/16p Ds-7616ni-q2\/16p Firmware Ds-7616ni-q2 Firmware Ids-2pt9a144mxs-d\/t2 Ids-2pt9a144mxs-d\/t2 Firmware Ids-2sk718mxs-d Ids-2sk718mxs-d Firmware Ids-2sk8144ixs-d\/j Ids-2sk8144ixs-d\/j Firmware Ids-2vs435-f840-ey Ids-2vs435-f840-ey\(t3\) Ids-2vs435-f840-ey\(t3\) Firmware Ids-2vs435-f840-ey Firmware Ptz-n2204i-de3 Ptz-n2204i-de3 Firmware Ptz-n2404i-de3 Ptz-n2404i-de3 Firmware Ptz-n4215-de3 Ptz-n4215-de3 Firmware Ptz-n4215i-de Ptz-n4215i-de Firmware Ptz-n4225i-de Ptz-n4225i-de Firmware Ptz-n5225i-a Ptz-n5225i-a Firmware
Weaknesses

Sources

Status
PUBLISHED
Assigner
hikvision
Published
Updated
Oct 21, 2025, 11:25 PM
Reserved
Jul 8, 2021, 12:00 AM
Status
Analyzed
Published
Sep 22, 2021, 1:15 PM
Modified
Jun 17, 2026, 3:58 AM