« Volver al listado

CVE-2015-4409

Estado: ModificadaMedia (6.5)—

Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service (service interruption) via a crafted HTTP request, aka the SDK issue.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Hikvision — Ds-76xxx Series FirmwareHikvision — Ds-77xxx Series Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-4409",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:N/I:N/A:C",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2017-03-13T06:59:00.260",
  "references": [
    {
      "url": "http://www.hikvision.com/En/Press-Release-details_435_i1023.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.hikvision.com/En/Press-Release-details_435_i1023.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow on Hikvision NVR DS-76xxNI-E1/2 and DS-77xxxNI-E4 devices before 3.4.0 allows remote authenticated users to cause a denial of service (service interruption) via a crafted HTTP request, aka the SDK issue."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer en dispositivos Hikvision NVR DS-76xxNI-E1/2 y DS-77xxxNI-E4 en versiones anteriores a 3.4.0 permite a usuarios remotos autenticados provocar una denegación de servicio (interrupción del servicio) a través de una petición HTTP manipulada, también conocido como el problema SDK."
    }
  ],
  "lastModified": "2026-06-17T00:27:14.377",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:hikvision:ds-76xxx_series_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CDE11EF2-6A3B-48D8-8F55-DD2EC46FEB17",
              "versionEndIncluding": "3.3.4"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:hikvision:ds-7604ni-e1\\/4p:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B42AEF94-3570-42D8-8A26-C96BFEE8AE28"
            },
            {
              "criteria": "cpe:2.3:h:hikvision:ds-7608ni-12\\/8p:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "FB6C2C41-706A-4464-9A92-ADE15D0B34FC"
            },
            {
              "criteria": "cpe:2.3:h:hikvision:ds-7608ni-e1\\/8p:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "52258BF1-0995-42E6-A732-B6CE5439D953"
            },
            {
              "criteria": "cpe:2.3:h:hikvision:ds-7616ni-12\\/16p:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "018559CD-2444-4F1C-8A17-79CCFAA55FB8"
            },
            {
              "criteria": "cpe:2.3:h:hikvision:ds-7616ni-e2\\/16p:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "09363BFC-83E7-430C-9E66-CB2DF786627D"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:hikvision:ds-77xxx_series_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "49BDB6E4-458B-4292-90CD-E1E4AF6B3E5D",
              "versionEndIncluding": "3.3.4"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:hikvision:ds-7716ni-14\\/16p:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "ED51956F-289A-4DFF-AFE1-CE4F9671C272"
            },
            {
              "criteria": "cpe:2.3:h:hikvision:ds-7716ni-sp\\/16:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F9C1A94F-667B-4D52-B1D9-18EEAE7470A4"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}