There is a privilege escalation vulnerability in some Hikvision DVR products. Due to the improper implementation of authentication for serial port, an attacker with physical access could exploit this by connecting affected products and gaining unrestricted shell environment.