CVEvulnerability

CVE-2025-66173

6.2 MEDIUM Published 2025-12-19 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-12-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.2 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-269

Description

There is a privilege escalation vulnerability in some Hikvision DVR products. Due to the improper implementation of authentication for the serial port, an attacker with physical access could exploit this vulnerability by connecting to the affected products and gaining access to an unrestricted shell environment.

Affected configurations

• hikvision ds-7104hghi-f1 firmware (<= 4.30.122 201107) • hikvision ds-7204hghi-f1 firmware (<= 4.30.122 201107)

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References