IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
7.2High

CVE-2026-0709

Hikvision DS-3WAP521-SI; Hikvision DS-3WAP522-SI; Hikvision DS-3WAP621E-SI; Hikvision DS-3WAP622E-SI Published: (9 months ago)

Description

Some Hikvision Wireless Access Points are vulnerable to authenticated command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution.

Weakness (CWE): CWE-78

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
Hikvision DS-3WAP521-SI V1.1.6303 build250812 and earlier
Hikvision DS-3WAP522-SI V1.1.6303 build250812 and earlier
Hikvision DS-3WAP621E-SI V1.1.6303 build250812 and earlier
Hikvision DS-3WAP622E-SI V1.1.6303 build250812 and earlier
Hikvision DS-3WAP622G-SI V1.1.6303 build250812 and earlier
Hikvision DS-3WAP623E-SI V1.1.6303 build250812 and earlier

References and patches