Command Injection Vulnerability in Hikvision's iSecure Center Software

CVE-2023-28815

What is CVE-2023-28815?

A command injection vulnerability exists in Hikvision's iSecure Center software due to insufficient parameter validation. This flaw allows attackers to exploit the system, potentially gaining unauthorized platform privileges and executing arbitrary commands. It is important to note that this product is specifically designed for the domestic market in China, with no international release. Vigilance is required to prevent unauthorized access and ensure system integrity.

References