Back to Database
Status published
Critical
CVE-2018-6414
A buffer overflow vulnerability in the web server of some...
Vulnerability Description
A buffer overflow vulnerability in the web server of some Hikvision IP Cameras allows an attacker to send a specially crafted message to affected devices. Due to the insufficient input validation, successful exploit can corrupt memory and lead to arbitrary code execution or crash the process.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-6414
Credits & Attribution
No credits recorded in the NVD database.
More from hikvision
View All →CVE-2023-28810
Some access control/intercom products have unauthorized modification of device network...
Medium
4.3
CVE-2023-28809
Some access control products are vulnerable to a session hijacking...
High
7.5
CVE-2023-28808
Some Hikvision Hybrid SAN/Cluster Storage products have an access control...
Critical
9.1
CVE-2022-28173
The web server of some Hikvision wireless bridge products have...
Critical
9.1
CVE-2022-28172
The web module in some Hikvision Hybrid SAN/Cluster Storage products...
Medium
6.5
Affected Vendor
hikvision
View all reports →Affected Software
DS-2DE4xxxW,DS-2DE5xxxW,DS-2DE7xxxW
Vulnerable Versions:
V5.5.6 build180408 and previous versions
Timeline
Official Publish:
August 13th, 2018
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.