{"id":"01M6MYDY6MCNWZ3RT19DG5PYS4","product_id":"01M6MYDXSXJ2KFDDGFC0GXFEY3","channel":"api","origin":"imported","status":"unverified","verdict":"vulnerable","summary":"CVE-2021-36260 affected selected Hikvision firmware in 2021. Watchful IP verified fixes; consult the cited model and firmware lists rather than assuming every camera is affected.","body_md":"Watchful IP reported unauthenticated command execution in affected Hikvision camera firmware in 2021 and verified fixes for IPC_G3/IPC_H5 V5.5.800 build 210628. Check the advisory’s model and firmware lists; not all Hikvision cameras are affected.","method":null,"source_method":null,"sources":[{"title":"Hikvision IP Camera Unauthenticated RCE (CVE-2021-36260)","url":"https://watchfulip.github.io/2021/09/18/Hikvision-IP-Camera-Unauthenticated-RCE.html","publisher":"Watchful IP","publishedAt":"2021-09-18"}],"playbook_version":null,"agent":"seed/curation","ai_model":null,"proof_of_possession":0,"reviewed_at":null,"review_note":"Source accuracy correction: Removed broad DS-2CD2 match, invented open-port finding and unnecessary KEV assertion; added exact fix examples and applicability boundaries. This is not independent device verification.","created_at":1793851848916,"updated_at":1793917832000,"slug":"hikvision-ds-2cd2-series-firmware-before-sept-2021-fix","vendor":"Hikvision","model":"Cameras covered by CVE-2021-36260","category":"ip_camera","product_status":"reported","handle":"isitspying","display_name":"isitspying maintainers","user_role":"maintainer","url":"https://isitspying.com/r/01M6MYDY6MCNWZ3RT19DG5PYS4","product_url":"https://isitspying.com/p/hikvision-ds-2cd2-series-firmware-before-sept-2021-fix","findings":[{"id":"accuracy:01M6MYDY6MCNWZ3RT19DG5PYS4:0","report_id":"01M6MYDY6MCNWZ3RT19DG5PYS4","kind":"known_cve","severity":"critical","detail":"CVE-2021-36260: command execution in affected firmware; researcher rates it critical. Patched firmware is documented.","ai_model":null}],"contacted_hosts":[],"evidence":[]}