Sensitive Information Disclosure in HikVision Camera Driver for XProtect

CVE-2024-12569

What is CVE-2024-12569?

CVE-2024-12569 is a high-risk vulnerability that affects the HikVision camera drivers in the XProtect Device Pack. It allows unauthorized access to sensitive information stored in the log file, specifically camera credentials located in the Recording Server. Under certain conditions, an attacker can exploit this vulnerability to read the confidential details, which could lead to unauthorized surveillance access. It is crucial for users to evaluate their systems and apply necessary security measures to mitigate the risks associated with this vulnerability.

News Articles

CybersecurityNews

CVE-2024-12569

Hikvision Camera Driver Vulnerability Records Login details in Log files

A newly disclosed security vulnerability, tracked under CVE-2024-12569, has been identified in Hikvision camera drivers.

References