SQL Injection Vulnerability Affects HikCentral Professional

CVE-2024-47487

What is CVE-2024-47487?

A SQL injection vulnerability exists in certain versions of HikCentral Professional, developed by Hikvision. This flaw allows authenticated users to manipulate SQL queries, potentially leading to unauthorized data access or modification. Such an exploitation poses a significant risk to the security and integrity of database-driven applications, making it crucial for affected users to apply security updates and patches as they become available.

References