Vulnerabilities, exploitation and vendor advisories affecting video infrastructure https://videosoc.com/ 2026-09-05T00:00:00Z https://videosoc.com/advisories/component-vulnerabilities-in-video-devices/ 2026-09-05T00:00:00Z 2026-09-05T00:00:00Z

CVE-2021-3156, the sudo heap overflow known as Baron Samedit, is recorded in NVD against the Synology VS960HD and has been in CISA's Known Exploited Vulnerabilities catalogue since April 2022. The catalogue files it under the vendor name "Sudo", so camera-vendor filters do not return it.

https://videosoc.com/advisories/dlink-network-storage-and-nvr-exploited/ 2026-09-05T00:00:00Z 2026-09-05T00:00:00Z

Three D-Link flaws are in CISA's exploited catalogue: hard-coded credentials, a command injection, and a Backup Config integrity failure (CWE-494). The KEV entries read "NAS" and "DNR-322L"; the CPE match names DNR-series network video recorders.

https://videosoc.com/advisories/geovision-end-of-life-devices-exploited/ 2026-09-05T00:00:00Z 2026-09-05T00:00:00Z

Discontinued GeoVision IP cameras, video servers, LPR units and DVRs carry two unauthenticated OS command injection flaws that CISA records as exploited. The products are end-of-life, so there is no fix to apply and the remediation is removal.

https://videosoc.com/advisories/hikvision-web-server-command-injection/ 2026-09-05T00:00:00Z 2026-09-05T00:00:00Z

An unauthenticated command injection in the Hikvision camera web server, alongside a 2017 improper-authentication flaw in an overlapping product line. CISA records both as exploited; 19 of 256 products carry version data.