Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-28815

Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation, resulting in a command injection vulnerability. Attackers may exploit this to gain pl

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hikvision

Description

Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation, resulting in a command injection vulnerability. Attackers may exploit this to gain platform privileges and execute arbitrary commands on the system.iSecure Center is software released for China's domestic market only, with no overseas release.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hikvision iSecure Center

  • V1.0.0 - V1.7.0affected

References