4.7Medium

CVE-2025-39245

Hikvision HikCentral Master Lite Published: (1 year ago)

Description

There is a CSV Injection Vulnerability in some HikCentral Master Lite versions. This could allow an attacker to inject executable commands via malicious CSV data.

Weakness (CWE): CWE-1236

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
Hikvision HikCentral Master Lite Versions between V2.2.1 and V2.3.2

References and patches