2 lines
2.5 KiB
JSON
2 lines
2.5 KiB
JSON
{"affected":[{"affectedData":[{"product":"DS-3E1310P-SI","vendor":"Hikvision","versions":[{"status":"affected","version":"Versions below V1.2.4_210623 (including V1.2.4_210623)"}]},{"product":"DS-3E1318P-SI","vendor":"Hikvision","versions":[{"status":"affected","version":"Versions below V1.2.0_210823 (including V1.2.0_210823)"}]},{"product":"DS-3E1326P-SI","vendor":"Hikvision","versions":[{"status":"affected","version":"Versions below V1.2.0_210823 (including V1.2.0_210823)"}]}],"source":"hsrc@hikvision.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"Some Hikvision switch products (discontinued since December 2023) are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution."},{"lang":"es","value":"Algunos productos switch de Hikvision (descontinuados desde diciembre de 2023) son vulnerables a la ejecución remota de comandos autenticada debido a una validación de entrada insuficiente. Atacantes con credenciales válidas pueden explotar esta falla enviando paquetes manipulados que contienen comandos maliciosos a los dispositivos afectados, lo que lleva a la ejecución arbitraria de comandos."}],"id":"CVE-2026-3828","lastModified":"2026-07-24T21:10:00.143","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.2,"impactScore":5.9,"source":"hsrc@hikvision.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-3828","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-05-11T15:22:31.962279Z","version":"2.0.3"}}]},"published":"2026-05-09T09:16:09.107","references":[{"source":"hsrc@hikvision.com","url":"https://www.hikvision.com/en/support/cybersecurity/security-advisory/command-execution-vulnerability-in-some-hikvision-switch-product/"}],"sourceIdentifier":"hsrc@hikvision.com","vulnStatus":"Awaiting Analysis","weaknesses":[{"description":[{"lang":"en","value":"CWE-78"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
|