EDB-50441

PoC

Hikvision Web Server Build 210702 - Command Injection

view exploit source exploit_dbtype webappsauthor bashispublished 2021-10-25catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2021-36260UScritical9.8OT criticalKEV
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan