hikvision vulnerabilities

Recent CVEs affecting hikvision products. 6 tracked.

hikvision has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 6. Most recent: 2026-01-13. Highest priority: CVE-2024-47485 (score 51/100).

• CVE-2025-66176 HIGH 8.8 UPGRADE UPGRADE There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Contro
• CVE-2025-66174 MEDIUM 6.5 UPGRADE UPGRADE There is an improper authentication vulnerability in some Hikvision DVR products
• CVE-2025-66173 MEDIUM 6.2 UPGRADE UPGRADE There is a privilege escalation vulnerability in some Hikvision DVR products
• CVE-2024-47487 HIGH 8.8 UPGRADE There is a SQL injection vulnerability in some HikCentral Professional versions
• CVE-2024-47486 MEDIUM 6.1 UPGRADE There is an XSS vulnerability in some HikCentral Master Lite versions
• CVE-2024-47485 CRITICAL 9.8 UPGRADE There is a CSV injection vulnerability in some HikCentral Master Lite versions

FAQ

How do I fix hikvision vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is hikvision being exploited right now?

None of the tracked hikvision CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which hikvision CVE should I patch first?

CVE-2024-47485 currently ranks highest (51/100): There is a CSV injection vulnerability in some HikCentral Master Lite versions.

Products

• ds-7104hghi-f1 firmware
• ds-7204hghi-f1 firmware
• ds-k1t331 firmware
• ds-k1t341a firmware
• ds-k1t341b firmware
• ds-k1t671 firmware
• ds-k1t672 firmware
• ds-k5671 firmware
• hikcentral master
• hikcentral professional

RSS feed for hikvision · ← Back to latest CVEs