iVMS-4500 Version 4.2.0 Affected by Malware

To Our Valued Partners and Customers:

We have recently become aware that our iVMS-4500, version 4.2.0, which was available on the iOS App Store as of September 2, 2015, has been affected by malware. This malware, dubbed XcodeGhost, may expose basic user information such as application name, installation time, language, and country. As such, Hikvision has removed iVMS-4500 version 4.2.0 from the App Store; it is no longer available for download. It is imperative that users delete v4.2.0 from their Apple devices. This malware did not affect the Android OS; therefore you may continue to use iVMS-4500 v4.2.0 on your Android devices. We have confirmed that versions of iVMS-4500 prior to v4.2.0 are not affected on either OS. 

To ensure the safety and privacy of our customers, we have created a new version of iVMS-4500: v4.2.1. This has been submitted to the iOS App Store for certification. We expect v4.2.1 to be available for download by October 1, 2015 at the latest, but it may be available as early as September 23, 2015. We will notify you as soon as v4.2.1 is available. 

We apologize for any inconvenience this may have caused you. The security needs of our customers and end users are of the utmost importance to us. If you have any questions, please don’t hesitate to contact your local sales engineer, or contact technical support at 909-612-9039 or

Hikvision USA and Canada


UPDATE – September 24, 2015: Users should update their current iVMS-4500 version 4.2.0 app to version 4.2.1


Monday, September 21, 2015
Technical bulletin category: 
TB file: 

IMPORTANT! This model requires non-standard firmware. Do Not Install standard firmware (e.g. v.4.1.xx) on this model. Doing so will permanently damage your system. You must use custom firmware v.4.1.25 from the iDS-9632NXI-I8/16S product page.

By downloading and using software and other materials available via this website, you agree to be legally bound by HIKVISION General Terms of Use . If you don’t agree to these terms, you may not download or use any of those materials.

If you are agreeing on behalf of your company, you represent and warrant that you have legal authority to bind your company to the General Terms of Use above. Also you represent and warrant that you are of the legal age of majority in the jurisdiction in which you reside (at least 18 years of age in many countries).