What is CVE-2018-6414?

CVE-2018-6414 is a critical-severity vulnerability in Hikvision Ds-2de4xxxw,ds-2de5xxxw,ds-2de7xxxw, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 9.8/10. Published 2018-08-13.

How severe is CVE-2018-6414?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Buffer overflow in Hikvision Ds-2de4xxxw,ds-2de5xxxw,ds-2de7xxxw

CVE-2018-6414

A buffer overflow vulnerability in the web server of some Hikvision IP Cameras allows an attacker to send a specially crafted message to affected devices. Due to the insufficient input validation, successful exploit can corrupt memory and lead to arbitrary code execution or crash the process.

Vulnerability class: Buffer Overflow

EPSS: 0.023 (81.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Hikvision Ds-2de4xxxw,ds-2de5xxxw,ds-2de7xxxw — versions V5.5.6 build180408 and previous versions
Hikvision Ip_cameras

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

hsrc@hikvision.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2018-6414?: CVE-2018-6414 is a critical-severity vulnerability in Hikvision Ds-2de4xxxw,ds-2de5xxxw,ds-2de7xxxw, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 9.8/10. Published 2018-08-13.
How severe is CVE-2018-6414?: Critical severity. CVSS v3 base score is 9.8 out of 10.