CVE-2026-57600 - Vulnerability Details - OpenCVE

Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Hikvision	Ds-2cd Series Ds-2de Series Ds-2dp Series Ds-2td Series

No data.

No data.

References

Link	Providers
https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-cameras/

History

Thu, 30 Jul 2026 10:00:00 +0000

Type	Values Removed	Values Added
Title	Partial Sensitive Data Retrieval via Unauthenticated Input Validation Flaw in Hikvision Cameras

Mon, 27 Jul 2026 23:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Hikvision Hikvision ds-2cd Series Hikvision ds-2de Series Hikvision ds-2dp Series Hikvision ds-2td Series
Vendors & Products		Hikvision Hikvision ds-2cd Series Hikvision ds-2de Series Hikvision ds-2dp Series Hikvision ds-2td Series

Sun, 26 Jul 2026 05:30:00 +0000

Type	Values Removed	Values Added
Title		Partial Sensitive Data Retrieval via Unauthenticated Input Validation Flaw in Hikvision Cameras

Wed, 22 Jul 2026 13:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-20
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 22 Jul 2026 11:45:00 +0000

Type	Values Removed	Values Added
Description		Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data.
References		https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-cameras/
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}`

MITRE

Status: PUBLISHED

Assigner: hikvision

Published: 2026-07-22T11:01:36.269Z

Updated: 2026-07-22T12:35:10.527Z

Reserved: 2026-06-25T02:07:05.126Z

Link: CVE-2026-57600

Vulnrichment

Updated: 2026-07-22T12:35:06.309Z

NVD

No data.

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-57600", "assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32", "state": "PUBLISHED", "assignerShortName": "hikvision", "dateReserved": "2026-06-25T02:07:05.126Z", "datePublished": "2026-07-22T11:01:36.269Z", "dateUpdated": "2026-07-22T12:35:10.527Z"}, "containers": {"cna": {"descriptions": [{"lang": "en", "value": "Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data."}], "affected": [{"vendor": "Hikvision", "product": "DS-2CD Series", "versions": [{"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/", "status": "affected", "versionType": "link"}]}, {"vendor": "Hikvision", "product": "DS-2DE Series", "versions": [{"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/", "status": "affected", "versionType": "link"}]}, {"vendor": "Hikvision", "product": "DS-2DP Series", "versions": [{"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/", "status": "affected", "versionType": "link"}]}, {"vendor": "Hikvision", "product": "DS-2TD Series", "versions": [{"version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/", "status": "affected", "versionType": "link"}]}], "references": [{"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-cameras/"}], "credits": [{"lang": "en", "value": "Bitdefender IoT Security Team", "type": "finder"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}}], "providerMetadata": {"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32", "shortName": "hikvision", "dateUpdated": "2026-07-22T11:01:36.269Z"}, "x_generator": {"engine": "cveClient/1.0.15"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-20", "lang": "en", "description": "CWE-20 Improper Input Validation"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-22T12:34:49.066951Z", "id": "CVE-2026-57600", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-22T12:35:10.527Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-57600", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-22T12:34:49.066951Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-22T12:35:06.309Z"}}], "cna": {"credits": [{"lang": "en", "type": "finder", "value": "Bitdefender IoT Security Team"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Hikvision", "product": "DS-2CD Series", "versions": [{"status": "affected", "version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/", "versionType": "link"}]}, {"vendor": "Hikvision", "product": "DS-2DE Series", "versions": [{"status": "affected", "version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/", "versionType": "link"}]}, {"vendor": "Hikvision", "product": "DS-2DP Series", "versions": [{"status": "affected", "version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/", "versionType": "link"}]}, {"vendor": "Hikvision", "product": "DS-2TD Series", "versions": [{"status": "affected", "version": "https://www.hikvision.com/en/support/download/firmware/security-firmware-download/", "versionType": "link"}]}], "references": [{"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-cameras/"}], "x_generator": {"engine": "cveClient/1.0.15"}, "descriptions": [{"lang": "en", "value": "Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data."}], "providerMetadata": {"orgId": "da451dce-859b-4e51-8b87-9c8b60d19b32", "shortName": "hikvision", "dateUpdated": "2026-07-22T11:01:36.269Z"}}}, "cveMetadata": {"cveId": "CVE-2026-57600", "state": "PUBLISHED", "dateUpdated": "2026-07-22T12:35:10.527Z", "dateReserved": "2026-06-25T02:07:05.126Z", "assignerOrgId": "da451dce-859b-4e51-8b87-9c8b60d19b32", "datePublished": "2026-07-22T11:01:36.269Z", "assignerShortName": "hikvision"}, "dataVersion": "5.2"}