Hikvision Surveillance Undergoes Patching Efforts38

Hikvision, a global leader in video surveillance technology, has recently disclosed a security vulnerability in its software products. The company is actively working to address the issue by releasing software patches that mitigate the risk.

The vulnerability, known as CVE-2023-24368, allows unauthorized attackers to access and modify Hikvision surveillance cameras and network video recorders (NVRs) through a remote code execution attack. The attackers can potentially take control of the devices, gain access to sensitive data, and disrupt the surveillance system.

Hikvision has acknowledged the vulnerability and released a statement emphasizing its commitment to customer security. The company has also provided a list of affected products and released firmware updates that address the issue.

The following Hikvision products are affected by CVE-2023-24368:
iVMS-4200 Client Software (versions prior to V3.7.1.2)
iVMS-5200 Professional (versions prior to V5.7.1.12)
iVMS-5200 Lite (versions prior to V5.7.1.12)
iVMS-5200 Enterprise (versions prior to V5.7.1.12)
iVMS-5200 Professional+ (versions prior to V5.7.1.12)
iVMS-5200 Enterprise+ (versions prior to V5.7.1.12)
Hikvision Network Video Recorder (NVR) (versions prior to V5.7.1.11)
Hikvision Turbo HD Network Video Recorder (NVR) (versions prior to V5.7.1.11)
Hikvision iDS-7000 Series NVR (versions prior to V5.7.1.11)
Hikvision iDS-9000 Series NVR (versions prior to V5.7.1.11)
Hikvision iDS-SD Series NVR (versions prior to V5.7.1.11)

Hikvision urges customers using the affected products to apply the security patches as soon as possible. The company has provided detailed instructions on how to download and install the updates on its website.

Users should follow these steps to mitigate the risk:
Check if your Hikvision products are affected by visiting the company's website and checking the list of affected products.
If your products are affected, download the latest firmware updates from Hikvision's website.
Follow the instructions provided by Hikvision to apply the updates to your devices.
Restart your devices after applying the updates to ensure they are fully installed.

Hikvision also advises customers to take additional security measures, such as implementing strong passwords, using network segmentation, and enabling two-factor authentication.

While Hikvision has taken steps to address the vulnerability, it is important for users to remain vigilant and follow best security practices to protect their surveillance systems from potential threats.

2025-01-13

Previous：Hikvision Surveillance Maintenance Tips: A Comprehensive Guide

Next：Hard Drive Recommendations for Surveillance Systems