CVE-2023-28814

CVSS 9.8 CRITICALEPSS 0.5%CWE-434

Some versions of Hikvision's iSecure Center Product have an improper file upload control vulnerability. Due to the improper verification of file to be uploaded, attackers may upload malicious files to the server. iSecure Center is software released for China's domestic market only, with no overseas release.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Hikvision · iSecure Center

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.hikvision.com/cn/support/CybersecurityCenter/SecurityNotices/2023-03/