High severity7.2NVD Advisory· Published Apr 2, 2024· Updated Apr 15, 2026

CVE-2024-29949

Description

There is a command injection vulnerability in some Hikvision NVRs. This could allow an authenticated user with administrative rights to execute arbitrary commands.

Affected products

A-Plus Video Technologies/NVRllm-fuzzy

Patches

Vulnerability mechanics

References

www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-hikvision-nvr-devices/nvd

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000