{"id":10354,"date":"2026-02-03T10:03:47","date_gmt":"2026-02-03T10:03:47","guid":{"rendered":"https:\/\/serisec.com\/index.php\/2026\/02\/03\/hikvision-wireless-access-points-vulnerability-enables-malicious-command-execution\/"},"modified":"2026-02-03T10:03:47","modified_gmt":"2026-02-03T10:03:47","slug":"hikvision-wireless-access-points-vulnerability-enables-malicious-command-execution","status":"publish","type":"post","link":"https:\/\/serisec.com\/index.php\/2026\/02\/03\/hikvision-wireless-access-points-vulnerability-enables-malicious-command-execution\/","title":{"rendered":"Hikvision Wireless Access Points Vulnerability Enables Malicious Command Execution"},"content":{"rendered":"

Hikvision Wireless Access Points Vulnerability Enables Malicious Command Execution
\n \t

\n
<\/BR>
\n
\n \t

\n
<\/BR><\/p>\n

\n

A critical authenticated command execution vulnerability has been disclosed affecting multiple Hikvision Wireless Access Point (WAP) models.<\/p>\n

The flaw, tracked as CVE-2026-0709, stems from insufficient input validation in device firmware<\/a>, potentially allowing attackers with valid credentials to execute arbitrary commands on affected systems.<\/p>\n

The vulnerability carries a CVSS v3.1 base score of 7.2, indicating a high-severity threat.<\/p>\n

According to the advisory, attackers who can authenticate to the device can send specially crafted packets containing malicious commands<\/a> directly to the WAP, bypassing critical security controls.<\/p>\n

This attack vector bypasses network perimeter defenses since it requires valid credentials, making it particularly dangerous in environments where user authentication has been compromised or where insider threats exist.<\/p>\n

Affected Models and Timeline<\/strong><\/h2>\n
\n\n\n\n\n\n\n\n\n\n\n
Affected Model<\/th>\nVulnerable Firmware Version<\/th>\n<\/tr>\n<\/thead>\n
DS-3WAP521-SI<\/td>\nV1.1.6303 build250812 and earlier<\/td>\n<\/tr>\n
DS-3WAP522-SI<\/td>\nV1.1.6303 build250812 and earlier<\/td>\n<\/tr>\n
DS-3WAP621E-SI<\/td>\nV1.1.6303 build250812 and earlier<\/td>\n<\/tr>\n
DS-3WAP622E-SI<\/td>\nV1.1.6303 build250812 and earlier<\/td>\n<\/tr>\n
DS-3WAP623E-SI<\/td>\nV1.1.6303 build250812 and earlier<\/td>\n<\/tr>\n
DS-3WAP622G-SI<\/td>\nV1.1.6303 build250812 and earlier<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/figure>\n

Hikvision has released patched firmware versions (V1.1.6601 build 251223) that address the flaw across all affected devices.<\/p>\n

The vulnerability was initially reported on January 30, 2026, by an independent security researcher, exzettabyte.<\/p>\n

Organizations deploying these WAP models <\/a>should immediately prioritize updating to the resolved firmware version to mitigate exploitation risks.<\/p>\n

Vulnerability Details and Impact<\/strong><\/h2>\n

The authenticated nature of this vulnerability makes it particularly concerning for enterprise environments.<\/p>\n

While attackers must possess valid device credentials, compromised user accounts, stolen credentials, or insider threats<\/a> can serve as entry points.<\/p>\n

Once authenticated, the insufficient input validation allows threat actors to inject and execute arbitrary commands with device privileges<\/a>, potentially leading to complete system compromise.<\/p>\n

Organizations operating affected Hikvision WAP models should take immediate action. Patches are available for download on the official Hikvision support portal.<\/p>\n

Administrators should deploy firmware version V1.1.6601 build 251223 across all vulnerable devices in their infrastructure.<\/p>\n

Simultaneously, organizations should review access controls and enforce strong authentication<\/a> mechanisms to limit device access to authorized personnel only.<\/p>\n

For organizations unable to patch immediately, implementing network segmentation to restrict device access and monitoring authentication logs for suspicious activity can provide interim protection.<\/p>\n

Additionally, credential rotation for affected devices is recommended<\/a> to prevent exploitation through compromised accounts. Hikvision\u2019s HSRC continues monitoring security threats and welcomes vulnerability disclosures at\u00a0hsrc@hikvision.com.<\/p>\n

Organizations with questions regarding this vulnerability should contact Hikvision support through official channels.<\/p>\n

Follow us on Google News<\/a>, LinkedIn<\/a>, and X<\/a> for daily cybersecurity updates. Contact us<\/a> to feature your stories.<\/strong><\/p>\n

The post Hikvision Wireless Access Points Vulnerability Enables Malicious Command Execution<\/a> appeared first on Cyber Security News<\/a>.<\/p>\n<\/div>\n

\t

\n
<\/BR>
\n Abinaya
\n \t

\n
<\/BR>
\nGo to cyber-security-news<\/a>
\n \t

\n
<\/BR><\/p>\n","protected":false},"excerpt":{"rendered":"

Hikvision Wireless Access Points Vulnerability Enables Malicious Command Execution A critical authenticated command execution vulnerability has been disclosed affecting multiple Hikvision Wireless Access Point (WAP) models. The flaw, tracked as CVE-2026-0709, stems from insufficient input validation in device firmware, potentially allowing attackers with valid credentials to execute arbitrary commands on affected systems. The vulnerability carries […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[129,63,648],"tags":[130],"class_list":["post-10354","post","type-post","status-publish","format-standard","hentry","category-cyber-security","category-cyber-security-news","category-vulnerability-news","tag-cyber-security-news"],"_links":{"self":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/10354"}],"collection":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/comments?post=10354"}],"version-history":[{"count":0,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/10354\/revisions"}],"wp:attachment":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/media?parent=10354"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/categories?post=10354"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/tags?post=10354"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}