CVE-2018-6414

9.8 criticalEPSS 2.3%

Critical (9.8) in hikvision ip cameras. EPSS 2.3% chance of exploitation in the next 30 days.

A buffer overflow vulnerability in the web server of some Hikvision IP Cameras allows an attacker to send a specially crafted message to affected devices. Due to the insufficient input validation, successful exploit can corrupt memory and lead to arbitrary code execution or crash the process.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2018-08-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hikvision:ip_cameras

References

https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-notification--buffer-overflow-vulnerability-in-some-hik/
https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-notification--buffer-overflow-vulnerability-in-some-hik/

Check your stack JSON