Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\/Sl_Firmware_2E549029-0E60-5F68-BB90-DF14FA88C6FE

9.8 / 10

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

海康威视 CVE-2021-36260 RCE 漏洞漏洞描述攻击者利用该漏洞可以用无限制的 root shell 来完全控制设备，即使设备的所有者受限于有限的受保护 shell（psh）。除了入侵 IP 摄像头外，还可以访问和攻击内部网络。 FOFA header="Hikvision" app="HIKVISION-视频监控" 使用方法 python ./CVE-2021-36260.py -u http://192.168.1.1:8080 --check python...

Visit Original Source

Basic Information

ID 2E549029-0E60-5F68-BB90-DF14FA88C6FE

Published Jan 21, 2026 at 13:25

Modified Jan 21, 2026 at 13:28

{
    "lastseen": "2026-01-21T13:29:12",
    "description": "\u6d77\u5eb7\u5a01\u89c6 CVE-2021-36260 RCE \u6f0f\u6d1e \u6f0f\u6d1e\u63cf\u8ff0 \u653b\u51fb\u8005\u5229\u7528\u8be5\u6f0f\u6d1e\u53ef\u4ee5\u7528\u65e0\u9650\u5236\u7684 root shell \u6765\u5b8c\u5168\u63a7\u5236\u8bbe\u5907\uff0c\u5373\u4f7f\u8bbe\u5907\u7684\u6240\u6709\u8005\u53d7\u9650\u4e8e\u6709\u9650\u7684\u53d7\u4fdd\u62a4 shell\uff08psh\uff09\u3002\u9664\u4e86\u5165\u4fb5 IP \u6444\u50cf\u5934\u5916\uff0c\u8fd8\u53ef\u4ee5\u8bbf\u95ee\u548c\u653b\u51fb\u5185\u90e8\u7f51\u7edc\u3002 FOFA header=\"Hikvision\" app=\"HIKVISION-\u89c6\u9891\u76d1\u63a7\" \u4f7f\u7528\u65b9\u6cd5 python ./CVE-2021-36260.py -u http://192.168.1.1:8080 --check python...",
    "published": "2026-01-21T13:25:42",
    "modified": "2026-01-21T13:28:41",
    "type": "githubexploit",
    "title": "Exploit for OS Command Injection in Hikvision Ds-2Cd2026G2-Iu\\/Sl_Firmware",
    "source": "",
    "references": "",
    "id": "2E549029-0E60-5F68-BB90-DF14FA88C6FE",
    "bulletinFamily": "exploit",
    "cwe": null,
    "cvelist": [
        "CVE-2021-36260"
    ],
    "sourceData": "",
    "sourceHref": "",
    "cvss": {
        "score": 9.8,
        "severity": "CRITICAL",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "https://github.com/yanxinwu946/hikvision-unauthenticated-rce-cve-2021-36260",
    "category_name": "Exploit",
    "post_link": "",
    "product": "",
    "version": "",
    "vendor": "",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}

Description

Basic Information

💭 Join the Security Discussion ❌ Cancel Reply