CVE-2026-85544 — Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attackers to forge a legitimate main card, thereby gaining the permission to issue cards

Back Back to CVE browser

MEDIUM

Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attackers to forge a legitimate main card, thereby gaining the permission to issue cards

Published Sep 10, 2026

6.1

MEDIUM

CVSS 3.1

EPSS 0.41%

Description

Some Hikvision intercom products utilize an immutable factory value which should be obtained from local network or physical interaction with the device within their main card, which may allow attackers to forge a legitimate main card, thereby gaining the permission to issue cards.

Affected products

Vendor Hikvision Product DS-KD8003 Default
n/a
- Version
  V3.7.1 and the versions prior to it
  Status
  affected
  Constraints
  -
Vendor Hikvision Product DS-KD8005 Default
n/a
- Version
  V3.10.0 and the versions prior to it
  Status
  affected
  Constraints
  -
Vendor Hikvision Product DS-KV6103 Default
n/a
- Version
  V3.7.0 and the versions prior to it
  Status
  affected
  Constraints
  -
Vendor Hikvision Product DS-KV6113 Default
n/a
- Version
  V3.7.0 and the versions prior to it
  Status
  affected
  Constraints
  -
Vendor Hikvision Product DS-KV6114 Default
n/a
- Version
  V3.9.0 and the versions prior to it
  Status
  affected
  Constraints
  -
Vendor Hikvision Product DS-KV6124 Default
n/a
- Version
  V3.9.0 and the versions prior to it
  Status
  affected
  Constraints
  -
Vendor Hikvision Product DS-KV6133 Default
n/a
- Version
  V3.7.0 and the versions prior to it
  Status
  affected
  Constraints
  -
Vendor Hikvision Product DS-KV6134 Default
n/a
- Version
  V3.9.0 and the versions prior to it
  Status
  affected
  Constraints
  -
Vendor Hikvision Product DS-KV8113 Default
n/a
- Version
  V3.7.0 and the versions prior to it
  Status
  affected
  Constraints
  -
Vendor Hikvision Product DS-KV8114 Default
n/a
- Version
  V3.11.0 and the versions prior to it
  Status
  affected
  Constraints
  -
Vendor Hikvision Product DS-KV8213 Default
n/a
- Version
  V3.7.0 and the versions prior to it
  Status
  affected
  Constraints
  -
Vendor Hikvision Product DS-KV8413 Default
n/a
- Version
  V3.7.0 and the versions prior to it
  Status
  affected
  Constraints
  -
Vendor Hikvision Product DS-KV9503 Default
n/a
- Version
  V2.3.13 and the versions prior to it
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Hikvision

DS-KD8003

n/a

Version	Status	Constraints
V3.7.1 and the versions prior to it	affected	-

Hikvision

DS-KD8005

n/a

Version	Status	Constraints
V3.10.0 and the versions prior to it	affected	-

Hikvision

DS-KV6103

n/a

Version	Status	Constraints
V3.7.0 and the versions prior to it	affected	-

Hikvision

DS-KV6113

n/a

Version	Status	Constraints
V3.7.0 and the versions prior to it	affected	-

Hikvision

DS-KV6114

n/a

Version	Status	Constraints
V3.9.0 and the versions prior to it	affected	-

Hikvision

DS-KV6124

n/a

Version	Status	Constraints
V3.9.0 and the versions prior to it	affected	-

Hikvision

DS-KV6133

n/a

Version	Status	Constraints
V3.7.0 and the versions prior to it	affected	-

Hikvision

DS-KV6134

n/a

Version	Status	Constraints
V3.9.0 and the versions prior to it	affected	-

Hikvision

DS-KV8113

n/a

Version	Status	Constraints
V3.7.0 and the versions prior to it	affected	-

Hikvision

DS-KV8114

n/a

Version	Status	Constraints
V3.11.0 and the versions prior to it	affected	-

Hikvision

DS-KV8213

n/a

Version	Status	Constraints
V3.7.0 and the versions prior to it	affected	-

Hikvision

DS-KV8413

n/a

Version	Status	Constraints
V3.7.0 and the versions prior to it	affected	-

Hikvision

DS-KV9503

n/a

Version	Status	Constraints
V2.3.13 and the versions prior to it	affected	-

Remediation

No remediation recorded yet.

Metrics

0.41% 0.00411

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00411

Score over time

Sep–Oct 2026

EPSS v5

Percentile over time

EPSS v5

Table of values (2 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.41% (0.00411)	32.96th	v5 (v2026.06.15)
Sep 11, 2026	0.10% (0.00100)	0.97th	v5 (v2026.06.15)

Weaknesses (2)

CWE-1310

CWE-798

Hard-coded Credentials

References (1)

https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-intercom-products

Link	Providers	Tags
https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikvision-intercom-products

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner hikvision

Published Sep 10, 2026

Updated Sep 18, 2026

Reserved Sep 4, 2026

Link CVE-2026-85544

CISA Vulnrichment

Updated Sep 10, 2026

NVD

Status Deferred

Modified Sep 18, 2026

Link CVE-2026-85544

Red Hat

Severity n/a

Public date n/a

Links CVE-2026-85544