Hikvision Switch Products Authenticated Remote Command Execution Vulnerability

A vulnerability allowing authenticated remote command execution has been identified in certain Hikvision switch products, which have been discontinued since December 2023. This issue arises from inadequate input validation, enabling attackers with valid credentials to send crafted packets containing malicious commands to the affected devices, resulting in arbitrary command execution.

Impact

Exploitation of this vulnerability allows for authenticated remote command execution on the affected devices.

Remediation

Users can upgrade to version V1.2.5_260309 for the DS-3E1310P-SI model, and to version V1.2.1_260309 for the DS-3E1318P-SI and DS-3E1326P-SI models.