Aaron J Jose

**Name of the Vulnerable Software and Affected Versions** Hikvision DVR products (affected versions not specified) **Description** A flaw exists in certain Hikvision DVR products related to authentication for the serial port. An attacker with physical access can connect to the affected devices and obtain an unrestricted shell environment. This is due to an improper implementation of authentication. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Hikvision DVR products (affected versions not specified) **Description** An improper authentication issue exists in certain Hikvision DVR products. An attacker with physical access can exploit this by connecting to the devices via the serial port and executing commands due to a flawed authentication implementation. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.