CVE-2013-4977: Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111...

Security readout for executives and security teams

This flaw affects a legacy Hikvision IP camera RTSP service. A remote attacker could send malformed RTSP traffic that crashes and reboots the device, disrupting video availability. The CVE also says code execution may be possible, but the provided sources do not confirm scope or reliability. Known exposure is Hikvision DS-2CD7153-E firmware 4.1.0 b130111. The CVE says possibly other devices, but product metadata is incomplete. Prioritize internet-facing or untrusted-network Hikvision RTSP services, especially legacy camera deployments and unmanaged surveillance networks. Prioritize remediation where affected cameras support physical security, compliance evidence, or critical operations. The main confirmed business impact is video outage through remote crash/reboot; possible code execution raises urgency, but source evidence is incomplete. Mitigation focus: Identify Hikvision cameras and record exact model and firmware versions.; Check Hikvision or vendor guidance for fixed firmware or supported replacement paths.; Remove RTSP exposure from the internet and restrict access to trusted networks..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.