CVE-2017-14953

Related Files

HikVision Wi-Fi IP Camera Wireless Access Point State

Posted Nov 28, 2017

Authored by IOT Sec

HikVision Wi-Fi IP cameras come with a default SSID "davinci", with a setting of no WiFi encryption or authentication. Depending on the firmware version, there is no configuration option within the camera to turn off Wi-Fi. If a camera is deployed via wired ethernet, then the WiFi settings won't be adjusted, and a rogue AP with the SSID "davinci" can be associated to the camera to provide a new attack vector via WiFi to a wired network camera. Tested on firmware versions 5.3.0, 5.4.0, and 5.4.5 and model number DS-2CD2432F-IW.

tags | exploit

advisories | CVE-2017-14953

SHA-256 | f5308846195618c1d90deb701b32687a1044057024da5ebb8faa201a03647d06

Download | Favorite | View