Hikvision DS-2CD2 series (firmware before Sept 2021 fix)
A maintainer confirmed the finding, or it is tied to a published CVE or writeup.
Network cameras affected by CVE-2021-36260, an unauthenticated command injection in the web server. In CISA's Known Exploited Vulnerabilities catalog.
Identity
- Brand
- Hikvision
- Model
- DS-2CD2 series (firmware before Sept 2021 fix)
- Made in
- CN (metadata, not a finding)
- Reports
- 1 total · 1 verified
Identifiers
| cve | CVE-2021-36260 |
| model_number | DS-2CD2 |
Check yours
Own one? Run the Trust Check and your report either corroborates or contradicts what's here. Both are useful.
claude mcp add --transport http isitspying https://mcp.isitspying.com/mcpThen ask: “Run a Trust Check on my Hikvision DS-2CD2 series (firmware before Sept 2021 fix).” Or file a report with photos.
Findings
| Finding | Max severity | Reports | Verified |
|---|---|---|---|
| Known CVE | critical | 1 | 1 |
| Open port | medium | 1 | 1 |
Published sources
- CVE-2021-36260 · NVD · 2021-09-22
- Hikvision security advisory HSRC-202109-01 · Hikvision · 2021-09-19
Reports · 1
- Vulnerable verified Unauthenticated remote command injection (CVE-2021-36260, CVSS 9.8); exploited in the wild per CISA KEV
app_analysis · via api · by isitspying maintainers maintainer · 4h ago
Responses & disputes · right of reply
None yet.
Post a vendor response, dispute, or corroboration
Sign in to post.
Takedown or legal: takedown@isitspying.com. See how we handle disputes.
Embed the status
<a href="https://isitspying.com/p/hikvision-ds-2cd2-series-firmware-before-sept-2021-fix"><img src="https://isitspying.com/badge/hikvision-ds-2cd2-series-firmware-before-sept-2021-fix.svg"></a>
JSON: /api/products/hikvision-ds-2cd2-series-firmware-before-sept-2021-fix · or request this page with Accept: application/json.