Hikvision DVR Privilege Escalation Vulnerability via Serial Port Authentication Flaw

A privilege escalation vulnerability has been identified in certain Hikvision DVR models. This issue arises from improper authentication implementation for the serial port, allowing an attacker with physical access to connect to the affected devices and gain entry to an unrestricted shell environment.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation, granting access to a shell environment with elevated rights on the affected device.

Remediation

Users can upgrade to version V4.30.123_251114 to address this vulnerability. This version is available for download from the Hikvision firmware repository.