CVEvulnerability

CVE-2026-85544

6.1 MEDIUM Published 2026-09-10 Modified 2026-09-18 Official page ↗

Status: Deferred
Published: 2026-09-10
Last modified: 2026-09-18
Assigner: [email protected]
CVSS 3.1 ([email protected]): 6.1 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses: CWE-1310, CWE-798

Description

Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attackers to forge a legitimate main card, thereby gaining the permission to issue cards.

Weakness · CWE (2)

CWE-1310 Missing Ability to Patch ROM Code weakness
CWE-798 Use of Hard-coded Credentials weakness

References

https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-intercom-products www.hikvision.com

CVE-2026-85544

Description

Related

Weakness · CWE (2)

References