{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000116.html",
  "dc:date": "2024-10-30T15:07+09:00",
  "dcterms:issued": "2024-10-30T15:07+09:00",
  "dcterms:modified": "2024-10-30T15:07+09:00",
  "description": "Multiple network cameras provided by Hangzhou Hikvision Digital Technology Co., Ltd. support two Dynamic DNS services, DynDNS and NO-IP.The user can select which to use on the GUI configuration page.\r\nBoth the services provide their APIs accessible via HTTP and HTTPS, but old firmware versions of Hikvision devices only support HTTP.This means the credential information is transmitted in unencrypted form.\r\nAs a security enhancement, the new firmware versions are provided, which change the behavior to communicate with the APIs via HTTPS only.",
  "link": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000116.html",
  "sec:cpe": [
    {
      "#text": "cpe:/o:misc:hangzhou_hikvision_digital_technology_ds-2cd1xxxg2",
      "@product": "DS-2CD1xxxG2",
      "@vendor": "Hangzhou Hikvision Digital Technology Co., Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:misc:hangzhou_hikvision_digital_technology_ds-2cd1xxxgo",
      "@product": "DS-2CD1xxxG0",
      "@vendor": "Hangzhou Hikvision Digital Technology Co., Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:misc:hangzhou_hikvision_digital_technology_ds-2cd29xxgo",
      "@product": "DS-2CD29xxG0",
      "@vendor": "Hangzhou Hikvision Digital Technology Co., Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:misc:hangzhou_hikvision_digital_technology_ds-2cd2xx1go",
      "@product": "DS-2CD2xx1G0",
      "@vendor": "Hangzhou Hikvision Digital Technology Co., Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:misc:hangzhou_hikvision_digital_technology_ds-2cd2xxxfwd",
      "@product": "DS-2CD2xxxFWD",
      "@vendor": "Hangzhou Hikvision Digital Technology Co., Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:misc:hangzhou_hikvision_digital_technology_ds-2cd2xxxg2",
      "@product": "DS-2CD2xxxG2",
      "@vendor": "Hangzhou Hikvision Digital Technology Co., Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:misc:hangzhou_hikvision_digital_technology_ds-2cd3xx1g2",
      "@product": "DS-2CD3xx1G2",
      "@vendor": "Hangzhou Hikvision Digital Technology Co., Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:misc:hangzhou_hikvision_digital_technology_ds-2cd3xx1go",
      "@product": "DS-2CD3xx1G0",
      "@vendor": "Hangzhou Hikvision Digital Technology Co., Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:misc:hangzhou_hikvision_digital_technology_ds-2cd3xxxg2",
      "@product": "DS-2CD3xxxG2",
      "@vendor": "Hangzhou Hikvision Digital Technology Co., Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:misc:hangzhou_hikvision_digital_technology_hwi-xxxxha",
      "@product": "HWI-xxxxHA",
      "@vendor": "Hangzhou Hikvision Digital Technology Co., Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:misc:hangzhou_hikvision_digital_technology_ipc-xxxxh",
      "@product": "IPC-xxxxH",
      "@vendor": "Hangzhou Hikvision Digital Technology Co., Ltd.",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/o:misc:hangzhou_hikvision_digital_technology_ipc-xxxxha",
      "@product": "IPC-xxxxHA",
      "@vendor": "Hangzhou Hikvision Digital Technology Co., Ltd.",
      "@version": "2.2"
    }
  ],
  "sec:identifier": "JVNDB-2024-000116",
  "sec:references": {
    "#text": "https://jvn.jp/en/jp/JVN11779839/index.html",
    "@id": "JVN#11779839",
    "@source": "JVN"
  },
  "title": "Hikvision network camera security enhancement to prevent cleartext transmission of Dynamic DNS credentials"
}