Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2021-36260

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.944
EPSS Ranking 100.0%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 9.3
Proposed Action
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation.
Ransomware Campaign
Unknown
References
Products affected by CVE-2021-36260


Contact Us

Shodan ® - All rights reserved