CVE-2025-66173

Katalog CVE

CVSS 6.2 · Medium EPSS 0,21%

Kerentanan Improper Privilege Management pada hikvision ds-7104hghi-f1 firmware, hikvision ds-7204hghi-f1 firmware. Skor CVSS 3.1 6.2 (Medium) menurut hikvision.com.

Deskripsi (NVD)

There is a privilege escalation vulnerability in some Hikvision DVR products. Due to the improper implementation of authentication for the serial port, an attacker with physical access could exploit this vulnerability by connecting to the affected products and gaining access to an unrestricted shell environment.

Rincian

Terbit di NVD

19 Desember 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

6.2 (Medium), sumber hikvision.com
CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-269: Improper Privilege Management

EPSS (30 hari)

0,21% peluang dieksploitasi; lebih tinggi dari 10,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.hikvision.com/en/support/cybersecurity/security-advisory/serial-port-privilege-escalation-vulnerab... advisory vendor