Hikvision Ds-7604ni-k1 / 4pb vulnerabilities

2 CVEs affecting Hikvision Ds-7604ni-k1 / 4pb, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-29949, published 2024-04-02.

More from Hikvision.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-29949, published 2024-04-02. High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days. There is a command injection vulnerability in some Hikvision NVRs. This could allow an authenticated user with administrative rights to execute arbitrary commands.
• CVE-2024-29947, published 2024-04-02. Low severity, CVSS 2.7. EPSS: 0.4% chance of exploitation in the next 30 days. There is a NULL dereference pointer vulnerability in some Hikvision NVRs. Due to an insufficient validation of a parameter in a message, an attacker may send specially crafted messages to an affected…