CVE-2018-6414 A buffer overflow vulnerability in the web server of some Hikvision IP Cameras allows an attacker to send a specially crafted message to affected devices. Due to the insufficient input validation, suc...
CriticalCVSS 9.8
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A buffer overflow vulnerability in the web server of some Hikvision IP Cameras allows an attacker to send a specially crafted message to affected devices. Due to the insufficient input validation, successful exploit can corrupt memory and lead to arbitrary code execution or crash the process.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Hikvision ip cameras | All versions | No fix listed |
| Hikvision DS-2DE4xxxW,DS-2DE5xxxW,DS-2DE7xxxW | = V5.5.6 build180408 and previous versions | No fix listed |