Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2023-53691

Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2023-06-25 allows file upload via /center/api/files directory traversal, as exploited in the wild

Description

Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2023-06-25 allows file upload via /center/api/files directory traversal, as exploited in the wild in 2024 and 2025.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hikvision CSMP iSecure Center

Default version status: unknown

  • 0 to ≤ 2023-06-25affected

References