CVE-2026-85544

Description

Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attackers to forge a legitimate main card, thereby gaining the permission to issue cards.

Traduire en français

Produits concernés

• Hikvision DS-KV9503
• Hikvision DS-KV6113
• Hikvision DS-KV6103
• Hikvision DS-KV6133
• Hikvision DS-KV8113
• Hikvision DS-KV8213
• Hikvision DS-KV8413
• Hikvision DS-KD8003
• Hikvision DS-KD8005
• Hikvision DS-KV6114
• Hikvision DS-KV6124
• Hikvision DS-KV6134
• Hikvision DS-KV8114

Scores CVSS

Faiblesses (CWE)

• CWE-798
• CWE-1310

Références

• https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-intercom-products

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories