Vendor

Hikvision

2 of 7 Hikvision CVEs in Patchfirst (29%) are in of vulnerabilities exploited in the wild.

CVEs: 7
In CISA KEV: 229%
Known ransomware use: 0
Median days to KEV: 1,668; from publication
Latest KEV listing: 5 Mar 2026

Watch Hikvision Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs

ProductKEVCVEs
Multiple Products In KEV: 1 CVEs: 1
Security cameras web server In KEV: 1 CVEs: 1
CSMP iSecure Center In KEV: 0 CVEs: 2
Intercom Broadcasting System In KEV: 0 CVEs: 2
Integrated Security Management Platform In KEV: 0 CVEs: 1

Top ATT&CK techniques

What attackers do with Hikvision CVEs

TechniqueCVEs
T1190Exploit Public-Facing Application CVEs: 2
T1059Command and Scripting Interpreter CVEs: 1
T1078Valid Accounts CVEs: 1

Open in ATT&CK Navigator

A layer for MITRE’s ATT&CK Navigator: techniques scored by the highest Patchfirst priority among their CVEs, neutral to red, with the CVE ids in each comment. “Open in Navigator” loads https://patchfirst.co/navigator/vendor/hikvision.json. Or download it and in Navigator choose Open Existing Layer → Upload from local.

Counts are Hikvision CVEs linked to the technique. Each link’s provenance is on the CVE page.

Hikvision CVEs

7 CVEs, by priority

CVE-2021-36260Hikvision Improper Input Validation
Hikvision · Security cameras web serverKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing Application T1059Command and Scripting Interpreter1 report
99.9%Top 0.04%
73.7priority
CVE-2023-6895Hikvision Intercom Broadcasting System ping.php os command injection
Hikvision · Intercom Broadcasting SystemPublic exploitMedium · 6.3
89.0%Top 0.22%
71.6priority
CVE-2017-7921Hikvision Multiple Products Improper Authentication Vulnerability
Hikvision · Multiple ProductsKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing Application T1078Valid Accounts
>99.9%Top 0.01%
69.9priority
CVE-2025-34067Hikvision Integrated Security Management Platform Remote Command Execution via applyCT Fastjson
Hikvision · Integrated Security Management PlatformPublic exploitCritical · 10.0
22.0%Top 2.3%
67.2priority
CVE-2024-58274Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2024-08-01 allows execution of a…
Hikvision · CSMP iSecure CenterHigh · 8.3
17.4%Top 2.9%
60.2priority
CVE-2023-53691Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2023-06-25 allows file upload via…
Hikvision · CSMP iSecure CenterHigh · 8.3
1.3%Top 30%
54.8priority
CVE-2023-6893Hikvision Intercom Broadcasting System exportrecord.php path traversal
Hikvision · Intercom Broadcasting SystemPublic exploitMedium · 4.3
70.2%Top 0.62%
27.9priority