CVE-2017-14953
Medium
Description
HikVision Wi-Fi IP cameras, when used in a wired configuration, allow physically proximate attackers to trigger association with an arbitrary access point by leveraging a default SSID with no WiFi encryption or authentication. NOTE: Vendor states that this is not a vulnerability, but more an increase to the attack surface of the product
SeverityMedium
CVSS6.5
Exploit probability—
ProductHikvision Ds-2cd2432f-iw Firmware
PublishedDec 1, 2017
First seenDec 1, 2017
How to fix
Update
- hikvision ds-2cd2432f-iw_firmware5.4.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hikvision ds-2cd2432f-iw_firmware | v < 5.4.5 | 5.4.5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.