The flaw stems from insufficient input validation in certain Hikvision Networking Products. An attacker who possesses valid credentials can craft specially formatted packets that carry arbitrary system or shell commands. When these packets are processed, the device executes the contained commands with the privileges of the authenticated session, enabling full command execution on the device. This is a classic command injection vulnerability, classified as CWE‑78.

The vulnerability affects Hikvision DS‑3WAP521‑SI, DS‑3WAP522‑SI, DS‑3WAP621E‑SI, DS‑3WAP622E‑SI, DS‑3WAP622G‑SI, DS‑3WAP623E‑SI, DS‑3WG105G‑SI, DS‑3WG105GP‑SI, DS‑3WG210GP‑SI, and DS‑3WG507G‑SI wireless access points. No specific firmware or serial number ranges are provided in the advisory.

The CVSS score of 7.2 indicates high severity. With an EPSS score under 1 % and not being listed in the CISA KEV catalog, large‑scale exploitation has not yet been documented. The flaw requires valid credentials, so the attack vector is an authenticated remote attack, typically limited to insiders or compromised users. The risk remains moderate; while widespread exploitation probability is low, the potential impact of successful exploitation is severe enough to warrant immediate attention.