9.8Kritisch

CVE-2023-28814

Hikvision iSecure Center Veröffentlicht: (vor 1 Jahr)

Beschreibung

Some versions of Hikvision's iSecure Center Product have an improper file upload control vulnerability. Due to the improper verification of file to be uploaded, attackers may upload malicious files to the server. iSecure Center is software released for China's domestic market only, with no overseas release.

Schwachstellentyp (CWE): CWE-434

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
Hikvision iSecure Center V1.0.0 - V1.7.0

Referenzen und Patches