You do not have permission to edit this page, for the following reasons:
The Hikvision DS-2CD2387G2-L(U) is a 4MP ColorVu fixed turret network camera. Its defining weakness is CVE-2021-36260 (CVSS 9.8), an unauthenticated command injection in the camera web server; NVD explicitly lists ds-2cd2387g2-l(u) among the affected CPEs, so the exposure is confirmed at model level rather than inferred from the product family. The flaw was exploited at scale: the Mirai-derived Moobot botnet targeted Hikvision cameras within weeks of the September 2021 disclosure, and scanning for this endpoint has continued since. Hikvision issued a patched firmware and a public advisory, but the update path is manual, so a large installed base is likely still vulnerable. The device is rated F: an unauthenticated remote compromise path is documented and proven in the wild, and the remaining user-authentication controls are bypassed entirely by that same flaw. Values for communications encryption, storage encryption, account management, brute-force protection and event logging are provisional because no model-level Hikvision documentation could be retrieved; the device is rated F on the strength of the CVE-2021-36260 evidence alone.
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
