4.7Medium
CVE-2025-39245
Description
There is a CSV Injection Vulnerability in some HikCentral Master Lite versions. This could allow an attacker to inject executable commands via malicious CSV data.
Weakness (CWE):
CWE-1236
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| Hikvision | HikCentral Master Lite | Versions between V2.2.1 and V2.3.2 |