https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-66176.htmlhttps://patchthecve.com/cve/CVE-2025-66176.htmlThu, 09 Jul 2026 07:16:21 +0000HIGH 8.8: There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (LAN) could cause the device to malfunction by sending specially crafted packets to an unpatched device.https://patchthecve.com/cve/CVE-2025-66174.htmlhttps://patchthecve.com/cve/CVE-2025-66174.htmlWed, 17 Jun 2026 09:56:27 +0000MEDIUM 6.5: There is an improper authentication vulnerability in some Hikvision DVR products. Due to the improper implementation of authentication for the serial port, an attacker with physical access could exploit this vulnerability by connecting to the affected products and run a series of commands.https://patchthecve.com/cve/CVE-2025-66173.htmlhttps://patchthecve.com/cve/CVE-2025-66173.htmlWed, 17 Jun 2026 09:56:26 +0000MEDIUM 6.2: There is a privilege escalation vulnerability in some Hikvision DVR products. Due to the improper implementation of authentication for the serial port, an attacker with physical access could exploit this vulnerability by connecting to the affected products and gaining access to an unrestricted shellhttps://patchthecve.com/cve/CVE-2024-47487.htmlhttps://patchthecve.com/cve/CVE-2024-47487.htmlWed, 17 Jun 2026 07:57:09 +0000HIGH 8.8: There is a SQL injection vulnerability in some HikCentral Professional versions. This could allow an authenticated user to execute arbitrary SQL queries.https://patchthecve.com/cve/CVE-2024-47486.htmlhttps://patchthecve.com/cve/CVE-2024-47486.htmlWed, 17 Jun 2026 07:57:09 +0000MEDIUM 6.1: There is an XSS vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could inject scripts into certain pages by building malicious data.https://patchthecve.com/cve/CVE-2024-47485.htmlhttps://patchthecve.com/cve/CVE-2024-47485.htmlWed, 17 Jun 2026 07:57:09 +0000CRITICAL 9.8: There is a CSV injection vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could build malicious data to generate executable commands in the CSV file.https://patchthecve.com/cve/CVE-2023-33806.htmlhttps://patchthecve.com/cve/CVE-2023-33806.htmlWed, 17 Jun 2026 06:02:19 +0000HIGH 7.8: Insecure default configurations in Hikvision Interactive Tablet DS-D5B86RB/B V2.3.0 build220119, allows attackers to execute arbitrary commands.