CVE-2026-3828

Some Hikvision switch products (discontinued since December 2023) are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution.

CVSS v3 7.2 HIGH

7.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.hikvision.com/en/support/cybersecurity/security-advisory/command-execution-vulnerability-in-some-hikvision-switch-product/

Configurations

No configuration.

History

No history.

Information

Published : 2026-05-09 09:16

Updated : 2026-07-24 21:10

NVD link : CVE-2026-3828

Mitre link : CVE-2026-3828

CVE.ORG link : CVE-2026-3828

JSON object : View

Products Affected

No product.

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2026-3828", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-3828", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-05-11T15:22:31.962279Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "hsrc@hikvision.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "affected": [{"source": "hsrc@hikvision.com", "affectedData": [{"vendor": "Hikvision", "product": "DS-3E1310P-SI", "versions": [{"status": "affected", "version": "Versions below V1.2.4_210623 (including V1.2.4_210623)"}]}, {"vendor": "Hikvision", "product": "DS-3E1318P-SI", "versions": [{"status": "affected", "version": "Versions below V1.2.0_210823 (including V1.2.0_210823)"}]}, {"vendor": "Hikvision", "product": "DS-3E1326P-SI", "versions": [{"status": "affected", "version": "Versions below V1.2.0_210823 (including V1.2.0_210823)"}]}]}], "published": "2026-05-09T09:16:09.107", "references": [{"url": "https://www.hikvision.com/en/support/cybersecurity/security-advisory/command-execution-vulnerability-in-some-hikvision-switch-product/", "source": "hsrc@hikvision.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "Some Hikvision switch products (discontinued since December 2023) are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution."}, {"lang": "es", "value": "Algunos productos switch de Hikvision (descontinuados desde diciembre de 2023) son vulnerables a la ejecuci\u00f3n remota de comandos autenticada debido a una validaci\u00f3n de entrada insuficiente. Atacantes con credenciales v\u00e1lidas pueden explotar esta falla enviando paquetes manipulados que contienen comandos maliciosos a los dispositivos afectados, lo que lleva a la ejecuci\u00f3n arbitraria de comandos."}], "lastModified": "2026-07-24T21:10:00.143", "sourceIdentifier": "hsrc@hikvision.com"}