Hangzhou Hikvision Digital Technology Co., Ltd.

First CVE: Apr 18, 2018Active for: 8 years
44
CVEs Published
More CVEs Published than 54% of tracked CNAs
6.3
Avg CVEs / Year
More Avg CVEs / Year than 39% of tracked CNAs
7.0
Avg CVSS Score
Higher Avg CVSS Score than 45% of tracked CNAs
2.3%
In CISA KEV
Higher KEV Rate than 92% of tracked CNAs

Self-Reporting Analysis

Of all the CVEs published by Hangzhou Hikvision Digital Technology Co., Ltd. as a CNA, 45.5% affect products that Hangzhou Hikvision Digital Technology Co., Ltd. develops as a vendor.

45.5%
54.5%
Self-reported: 20Third-party: 24

Of all the CVEs published that affect products developed by Hangzhou Hikvision Digital Technology Co., Ltd., 55.6% are self-published by Hangzhou Hikvision Digital Technology Co., Ltd. as a CNA.

55.6%
44.4%
Self-published: 20Published by other CNAs: 16

Trends Over Time

The number and severity of CVEs published by Hangzhou Hikvision Digital Technology Co., Ltd. over time

Volume of CVEsAvg CVSS Base Score
First CVE
Apr 18, 2018
8 years ago
Most Recent CVE
Jul 22, 2026
2 days ago

Top CVEs

All CVEs published by Hangzhou Hikvision Digital Technology Co., Ltd. as a CNA, regardless of affected vendor or product.

44 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command
Sep 22, 20219.899YESYES
The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the v
Jun 27, 20229.869NOYES
There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision Access Control Products. If exploited, an attacker on the same local area network (
Jan 13, 20268.834NONO
Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation, resulting in a command injection vulnerability. Attackers may exploit this to gain pl
Oct 17, 20259.833NONO
There is a stack-based buffer overflow vulnerability in some Hikvision cameras, which may allow authenticated attackers to cause device malfunction by sending specially crafted pac
Jul 22, 20267.232NONO
Some Hikvision switch products (discontinued since December 2023) are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with vali
May 9, 20267.231NONO
There is a Buffer overflow Vulnerability in the device Search and Discovery feature of Hikvision NVR/DVR/CVR/IPC models. If exploited, an attacker on the same local area network (L
Jan 13, 20268.831NONO
A buffer overflow vulnerability in the web server of some Hikvision IP Cameras allows an attacker to send a specially crafted message to affected devices. Due to the insufficient i
Aug 13, 20189.831NONO
There is a heap buffer overflow vulnerability in some Hikvision cameras, which may allow unauthenticated attackers to cause device malfunction by sending specially crafted packets.
Jul 22, 20267.730NONO
Insufficient validation of input parameters in the firmware of some Hikvision cameras allows unauthenticated attackers to retrieve partial sensitive data.
Jul 22, 20267.530NONO

CVE Severity & Scoring

Severity distribution of CVEs published by this CNA44 CVEs
Severity distribution among all CVEs352,294 CVEs
LowMediumHighCritical
Attack Vector
Local1 (2.3%)
Network35 (79.5%)
Unknown0 (0.0%)
Physical3 (6.8%)
Adjacent Network5 (11.4%)
Attack Complexity
Low38 (86.4%)
High6 (13.6%)
Unknown0 (0.0%)
User Interaction
None40 (90.9%)
Unknown0 (0.0%)
Required4 (9.1%)
Privileges Required
Low3 (6.8%)
High11 (25.0%)
None30 (68.2%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this cna scope (44 CVEs).

CISA KEV
1 CVE
2.3% of CVEs· 92nd percentile
Metasploit
1 CVE
2.3% of CVEs· 92nd percentile
Nuclei
1 CVE
2.3% of CVEs· 86th percentile
ExploitDB
2 CVEs
4.5% of CVEs· 94th percentile

Social Chatter

An overview of all social media posts that mention a CVE ID published by Hangzhou Hikvision Digital Technology Co., Ltd. as a CNA.

Media Mentions

Media articles that mention a CVE ID published by Hangzhou Hikvision Digital Technology Co., Ltd. as a CNA — matched by CVE ID, not by organization name.

Top Affected Vendors

Top Affected Products

Top CWEs