{"uuid": "56bd64e8-4c37-4b48-92c6-9d2782213542", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-36260", "type": "seen", "source": "https://t.me/hacking_Attack/66486", "content": "Black Hat Ethical Hacking\nOver 80000 Hikvision vulnerable cameras exposed online\n\nOver 80000 Hikvision vulnerable cameras exposed onlinePost Views: 45 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Patreon-1.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes Security researchers have discovered over 80,000 Hikvision cameras vulnerable exposed online vulnerable to a critical command injection flaw that\u2019s easily exploitable via specially crafted messages sent to the vulnerable web server.The flaw is tracked as CVE-2021-36260 and was addressed by Hikvision via a firmware update in September 2021.\n\nHowever, according to a whitepaper published by CYFIRMA, tens of thousands of systems used by 2,300 organizations across 100 countries have still not applied the security update.\n\nThere have been two known public exploits for CVE-2021-36260, one published in October 2021\u00a0and the second in February 2022, so threat actors of all skill levels can search for and exploit vulnerable cameras.\n\nIn December 2021, a Mirai-based botnet called \u2018Moobot\u2019 used the particular exploit to spread aggressively\u00a0and enlist systems into DDoS\u00a0(distributed denial of service)\u00a0swarms.\n\nIn January 2022, CISA alerted that CVE-2021-36260 was among the actively exploited bugs\u00a0in the then published list, warning organizations that attackers could \u201ctake control\u201d of devices and to patch the flaw immediately.\nSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Vulnerable and exploitedCYFIRMA says Russian-speaking hacking forums often sell network entrance points relying on exploitable Hikvision cameras that can be used either for \u201cbotnetting\u201d or lateral movement.\nhttps://www.bleepstatic.com/images/news/u/1220909/Forum%20and%20Marketplace%20Posts/russian-forum.png \nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Sponsor.png Weak passwords also a problemApart from the command injection vulnerability, there\u2019s also the issue of weak passwords that users set for convenience or that come with the device by default and aren\u2019t reset during the first set up.\n\nBleeping Computer has spotted multiple offerings of lists,\u00a0some even free, containing credentials for Hikvision camera live video feeds on clearnet hacking forums.\nhttps://www.b[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:25.873547Z"}