5.3Medium

CVE-2025-39246

Hikvision HikCentral FocSign Published: (1 year ago)

Description

There is an Unquoted Service Path Vulnerability in some HikCentral FocSign versions. This could allow an authenticated user to potentially enable escalation of privilege via local access.

Weakness (CWE): CWE-428

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
Hikvision HikCentral FocSign Versions between V1.4.0 and V2.2.0

References and patches