{"id":202,"date":"2026-08-03T13:52:12","date_gmt":"2026-08-03T13:52:12","guid":{"rendered":"https:\/\/blog.netvision.com.py\/?p=202"},"modified":"2026-08-03T13:52:47","modified_gmt":"2026-08-03T13:52:47","slug":"alerta-de-seguridad-vulnerabilidad-de-ejecucion-remota-de-comandos-en-productos-hikvision","status":"publish","type":"post","link":"https:\/\/blog.netvision.com.py\/?p=202","title":{"rendered":"Alerta de Seguridad: Vulnerabilidad de Ejecuci\u00f3n Remota de Comandos en Productos Hikvision"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">A continuaci\u00f3n, se presentan los detalles t\u00e9cnicos de los modelos impactados y las versiones de firmware necesarias para corregir la falla.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Detalles T\u00e9cnicos (CVE-2026-16843)<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">La vulnerabilidad fue reportada por el investigador <em>exzettabyte<\/em> y se debe a una <strong>validaci\u00f3n de entrada insuficiente<\/strong> en la gesti\u00f3n de paquetes de red.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Un atacante que disponga de credenciales v\u00e1lidas en el equipo puede enviar paquetes especialmente manipulados que contengan comandos maliciosos. De ser explotada con \u00e9xito, la falla le permite al atacante <strong>ejecutar comandos arbitrarios de forma remota<\/strong> en el dispositivo.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Recursos Afectados<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">La falla afecta a dos l\u00edneas principales de equipos Hikvision (puntos de acceso inal\u00e1mbricos y gateways\/routers):<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Puntos de Acceso (Access Points):<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Modelos: DS-3WAP521-SI, DS-3WAP522-SI, DS-3WAP621E-SI, DS-3WAP622E-SI, DS-3WAP623E-SI y DS-3WAP622G-SI.<\/li>\n\n\n\n<li>Versiones vulnerables: Versi\u00f3n 1.1.6601 compilaci\u00f3n 251223 y anteriores.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Gateways \/ Routers:<\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Modelos: DS-3WG105G-SI, DS-3WG105GP-SI, DS-3WG210GP-SI y DS-3WG507G-SI.<\/li>\n\n\n\n<li>Versiones vulnerables: Versi\u00f3n 1.0.6601 compilaci\u00f3n 251223 y anteriores.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Soluci\u00f3n y Mitigaci\u00f3n<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">El fabricante ha liberado las actualizaciones de firmware correspondientes. Se recomienda a los administradores de red aplicar las siguientes versiones parcheadas de manera inmediata:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Para la serie DS-3WAP (Access Points):<\/strong> Actualizar a la <strong>versi\u00f3n 1.1.6602 compilaci\u00f3n 260526<\/strong><sup><\/sup>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Para la serie DS-3WG (Gateways):<\/strong> Actualizar a la <strong>versi\u00f3n 1.0.6602 compilaci\u00f3n 260703<\/strong><sup><\/sup>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Foto de <a href=\"https:\/\/unsplash.com\/es\/@shaikhulud?utm_source=unsplash&amp;utm_medium=referral&amp;utm_content=creditCopyText\">Maxim Tolchinskiy<\/a> en <a href=\"https:\/\/unsplash.com\/es\/fotos\/dispositivo-de-reconocimiento-facial-que-muestra-una-imagen-en-blanco-y-negro-CqSpoJs2ehg?utm_source=unsplash&amp;utm_medium=referral&amp;utm_content=creditCopyText\">Unsplash<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>El 3 de agosto de 2026, INCIBE-CERT public\u00f3 una alerta de seguridad de severidad alta (Nivel 4) que afecta a diversos dispositivos de red y puntos de acceso del fabricante Hikvision. Un fallo de validaci\u00f3n de entrada permite la ejecuci\u00f3n remota de comandos en el sistema operativo del equipo.<\/p>\n","protected":false},"author":1,"featured_media":203,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-202","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cyberseguridad"],"_links":{"self":[{"href":"https:\/\/blog.netvision.com.py\/index.php?rest_route=\/wp\/v2\/posts\/202","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.netvision.com.py\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.netvision.com.py\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.netvision.com.py\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.netvision.com.py\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=202"}],"version-history":[{"count":1,"href":"https:\/\/blog.netvision.com.py\/index.php?rest_route=\/wp\/v2\/posts\/202\/revisions"}],"predecessor-version":[{"id":205,"href":"https:\/\/blog.netvision.com.py\/index.php?rest_route=\/wp\/v2\/posts\/202\/revisions\/205"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.netvision.com.py\/index.php?rest_route=\/wp\/v2\/media\/203"}],"wp:attachment":[{"href":"https:\/\/blog.netvision.com.py\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=202"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.netvision.com.py\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=202"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.netvision.com.py\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=202"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}