{"id":"01M6MYDXSXJ2KFDDGFC0GXFEY3","slug":"hikvision-ds-2cd2-series-firmware-before-sept-2021-fix","vendor":"Hikvision","oem":null,"model":"DS-2CD2 series (firmware before Sept 2021 fix)","hw_revision":null,"category":"ip_camera","country_of_origin":"CN","description":"Network cameras affected by CVE-2021-36260, an unauthenticated command injection in the web server. In CISA's Known Exploited Vulnerabilities catalog.","status":"confirmed","status_reason":"CVE-2021-36260, in CISA's Known Exploited Vulnerabilities catalog","status_at":1793853869517,"status_manual":1,"report_count":1,"verified_count":1,"created_by":"01M6MYDMJ4H4JTJ0TK8JWT1E1B","created_at":1793851848509,"updated_at":1793853869517,"url":"https://isitspying.com/p/hikvision-ds-2cd2-series-firmware-before-sept-2021-fix","badge":"https://isitspying.com/badge/hikvision-ds-2cd2-series-firmware-before-sept-2021-fix.svg","identifiers":[{"kind":"cve","value":"CVE-2021-36260","product_id":"01M6MYDXSXJ2KFDDGFC0GXFEY3","confidence":1,"source":"seed","created_at":1793851848629},{"kind":"model_number","value":"DS-2CD2","product_id":"01M6MYDXSXJ2KFDDGFC0GXFEY3","confidence":1,"source":"seed","created_at":1793851848679}],"findings":[{"kind":"known_cve","severity":"critical","n":1,"verified_n":1},{"kind":"open_port","severity":"medium","n":1,"verified_n":1}],"contacted_hosts":[],"reports":[{"id":"01M6MYDY6MCNWZ3RT19DG5PYS4","url":"https://isitspying.com/r/01M6MYDY6MCNWZ3RT19DG5PYS4","status":"verified","verdict":"vulnerable","summary":"Unauthenticated remote command injection (CVE-2021-36260, CVSS 9.8); exploited in the wild per CISA KEV","method":"app_analysis","channel":"api","handle":"isitspying","created_at":1793851848916}],"responses":[],"sources":[{"id":"01M6MYDY1JQAY9FW76YXFN4PM7","product_id":"01M6MYDXSXJ2KFDDGFC0GXFEY3","report_id":null,"title":"CVE-2021-36260","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-36260","publisher":"NVD","published_at":"2021-09-22","created_at":1793851848754},{"id":"01M6MYDY45TJR9TGBK3NVHE5TW","product_id":"01M6MYDXSXJ2KFDDGFC0GXFEY3","report_id":null,"title":"Hikvision security advisory HSRC-202109-01","url":"https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-notification-command-injection-vulnerability-in-some-hikvision-products/","publisher":"Hikvision","published_at":"2021-09-19","created_at":1793851848837}]}