Find a vulnerability

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

2 vulnerabilities found for DS-KV6124 by Hikvision

CVE-2026-85544 (GCVE-0-2026-85544)

Vulnerability from nvd – Published: 2026-09-10 12:26 – Updated: 2026-09-18 09:39

Summary

Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attackers to forge a legitimate main card, thereby gaining the permission to issue cards.

Severity

6.1 (Medium)


                        
                          CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-10 14:51 UTC

CWE

CWE-798 - Use of Hard-coded Credentials
CWE-1310 - Missing Ability to Patch ROM Code

Assigner

hikvision mitre root

References

1 reference

URL	Tags
https://www.hikvision.com/en/support/cybersecurit…

Impacted products

13 products

Vendor	Product	Version
Hikvision	DS-KV9503	Affected: V2.3.13 and the versions prior to it
Hikvision	DS-KV6113	Affected: V3.7.0 and the versions prior to it
Hikvision	DS-KV6103	Affected: V3.7.0 and the versions prior to it
Hikvision	DS-KV6133	Affected: V3.7.0 and the versions prior to it
Hikvision	DS-KV8113	Affected: V3.7.0 and the versions prior to it
Hikvision	DS-KV8213	Affected: V3.7.0 and the versions prior to it
Hikvision	DS-KV8413	Affected: V3.7.0 and the versions prior to it
Hikvision	DS-KD8003	Affected: V3.7.1 and the versions prior to it
Hikvision	DS-KD8005	Affected: V3.10.0 and the versions prior to it
Hikvision	DS-KV6114	Affected: V3.9.0 and the versions prior to it
Hikvision	DS-KV6124	Affected: V3.9.0 and the versions prior to it
Hikvision	DS-KV6134	Affected: V3.9.0 and the versions prior to it
Hikvision	DS-KV8114	Affected: V3.11.0 and the versions prior to it

Credits

Filipe Moreira

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-85544",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-10T14:51:42.740079Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-1310",
                "description": "CWE-1310 Missing Ability to Patch ROM Code",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-10T14:52:28.338Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "DS-KV9503",
          "vendor": "Hikvision",
          "versions": [
            {
              "status": "affected",
              "version": "V2.3.13 and the versions prior to it"
            }
          ]
        },
        {
          "product": "DS-KV6113",
          "vendor": "Hikvision",
          "versions": [
            {
              "status": "affected",
              "version": "V3.7.0 and the versions prior to it"
            }
          ]
        },
        {
          "product": "DS-KV6103",
          "vendor": "Hikvision",
          "versions": [
            {
              "status": "affected",
              "version": "V3.7.0 and the versions prior to it"
            }
          ]
        },
        {
          "product": "DS-KV6133",
          "vendor": "Hikvision",
          "versions": [
            {
              "status": "affected",
              "version": "V3.7.0 and the versions prior to it"
            }
          ]
        },
        {
          "product": "DS-KV8113",
          "vendor": "Hikvision",
          "versions": [
            {
              "status": "affected",
              "version": "V3.7.0 and the versions prior to it"
            }
          ]
        },
        {
          "product": "DS-KV8213",
          "vendor": "Hikvision",
          "versions": [
            {
              "status": "affected",
              "version": "V3.7.0 and the versions prior to it"
            }
          ]
        },
        {
          "product": "DS-KV8413",
          "vendor": "Hikvision",
          "versions": [
            {
              "status": "affected",
              "version": "V3.7.0 and the versions prior to it"
            }
          ]
        },
        {
          "product": "DS-KD8003",
          "vendor": "Hikvision",
          "versions": [
            {
              "status": "affected",
              "version": "V3.7.1 and the versions prior to it"
            }
          ]
        },
        {
          "product": "DS-KD8005",
          "vendor": "Hikvision",
          "versions": [
            {
              "status": "affected",
              "version": "V3.10.0 and the versions prior to it"
            }
          ]
        },
        {
          "product": "DS-KV6114",
          "vendor": "Hikvision",
          "versions": [
            {
              "status": "affected",
              "version": "V3.9.0 and the versions prior to it"
            }
          ]
        },
        {
          "product": "DS-KV6124",
          "vendor": "Hikvision",
          "versions": [
            {
              "status": "affected",
              "version": "V3.9.0 and the versions prior to it"
            }
          ]
        },
        {
          "product": "DS-KV6134",
          "vendor": "Hikvision",
          "versions": [
            {
              "status": "affected",
              "version": "V3.9.0 and the versions prior to it"
            }
          ]
        },
        {
          "product": "DS-KV8114",
          "vendor": "Hikvision",
          "versions": [
            {
              "status": "affected",
              "version": "V3.11.0 and the versions prior to it"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Filipe Moreira"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attackers to forge a legitimate main card, thereby gaining the permission to issue cards."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-798",
              "description": "CWE-798 Use of Hard-coded Credentials",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-18T09:39:16.889Z",
        "orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
        "shortName": "hikvision"
      },
      "references": [
        {
          "url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-intercom-products"
        }
      ],
      "x_generator": {
        "engine": "cveClient/1.0.15"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32",
    "assignerShortName": "hikvision",
    "cveId": "CVE-2026-85544",
    "datePublished": "2026-09-10T12:26:00.396Z",
    "dateReserved": "2026-09-04T09:24:07.712Z",
    "dateUpdated": "2026-09-18T09:39:16.889Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}