Hikvision have declared three new vulnerabilities to their partners by email this morning.
This post covers two vulnerabilities, a subsequent post will cover the other newly declared vulnerability which only affects certain devices.
Given that it is Friday morning, and my quick first impression...