Attackers Could Gain Access to Restricted URLs Due to Insufficient Server-Side Validation

CVE-2024-25063

What is CVE-2024-25063?

A vulnerability exists in Hikvision's HikCentral Professional due to insufficient server-side validation. This security flaw facilitates unauthorized access to certain URLs, enabling potential exploitation by attackers. The lack of proper validation mechanisms can lead to sensitive information disclosure and unauthorized actions within the affected system.

References