Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2026-85543 Details
Description
Some Wi-Fi series camera products have insufficient permission validation on certain interfaces, allowing authenticated low-privileged users to obtain device Wi-Fi configuration information through these interfaces.
A vulnerability exists in certain Wi-Fi series camera products from Hikvision due to inadequate permission validation on specific interfaces. This flaw enables authenticated low-privileged users to access device Wi-Fi configuration details through these interfaces. The issue is present in the IPC 1 Series and IPC 2 Series cameras, all models within these series that fall under the specified categories.
Users are advised to upgrade to the latest firmware version V5.7.26, which addresses this vulnerability. The updated firmware can be downloaded from the Hikvision global website.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 10, 2026Exploitation: NoneAutomatable: NoTechnical Impact: Partial
CISA-ADP
Assessed Sep 10, 2026Exploitation: PocAutomatable: NoTechnical Impact: Partial
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.hikvision.com/content/dam/hikvision/en/support/download/firmware/ipc/cve-temp-fw/Network-Camera-V5.7.26-Release-Note-E8.pdf | [email protected] | AdvisoryRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-285 | Improper Authorization | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| Hikvision DS-2CD1623G0-IZ | All versions |
CPE
Remediation
| |
| Hikvision DS-2CD1623G0-IZS | All versions |
CPE
Remediation
| |
| Hikvision DS-2CD1643G0-IZ | All versions |
CPE
Remediation
| |
| Hikvision DS-2CD1643G0-IZS | All versions |
CPE
Remediation
| |
| Hikvision DS-2CD1653G0-IZ | All versions |
CPE
Remediation
| |
| Hikvision DS-2CD1653G0-IZS | All versions |
CPE
Remediation
| |
| Hikvision DS-2CD1723G0-IZ | All versions |
CPE
Remediation
| |
| Hikvision DS-2CD1723G0-IZS | All versions |
CPE
Remediation
| |
| Hikvision DS-2CD1743G0-IZ | All versions |
CPE
Remediation
| |
| Hikvision DS-2CD1743G0-IZS | All versions |
CPE
Remediation
| |
| Hikvision DS-2CD1753G0-IZ | All versions |
CPE
Remediation
| |
| Hikvision DS-2CD1753G0-IZS | All versions |
CPE
Remediation
| |
| Hikvision DS-2CD1A23G0-IZU | All versions |
CPE
Remediation
| |
| Hikvision DS-2CD1A43G0-IZU | All versions |
CPE
Remediation
| |
| Hikvision DS-2CD1H23G0-IZ | All versions |
CPE
Remediation
| |
| Hikvision DS-2CD1H23G0-IZS | All versions |
CPE
Remediation
| |
| Hikvision DS-2CD1H43G0-IZ | All versions |
CPE
Remediation
| |
| Hikvision DS-2CD1H43G0-IZS | All versions |
CPE
Remediation
| |
| Hikvision DS-2CD1H53G0-IZ | All versions |
CPE
Remediation
| |
| Hikvision DS-2CD1H53G0-IZS | All versions |
CPE
Remediation
| |
| Hikvision DS-2CD2021G1-I | All versions |
CPE
Remediation
| |
| Hikvision DS-2CD2121G0-I | All versions |
CPE
Remediation
| |
| Hikvision DS-2CD2121G0-IS | All versions |
CPE
Remediation
| |
| Hikvision DS-2CD2321G0-I | All versions |
CPE
Remediation
| |
| Hikvision DS-2CD2421G0-I | All versions |
CPE
Remediation
| |
| Hikvision DS-2CD2421G0-IW | All versions |
CPE
Remediation
| |
| Hikvision DS-2CD2441G0-I | All versions |
CPE
Remediation
| |
| Hikvision DS-2CD2441G0-IW | All versions |
CPE
Remediation
| |
| Hikvision DS-2CD2621G0-IZ | All versions |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 10, 2026 | CVE Modified | CISA-ADP |
| Sep 10, 2026 | New CVE Received | [email protected] |