Remote Command Execution Vulnerability in Hikvision CSMP iSecure Center

CVE-2024-58274

What is CVE-2024-58274?

An identified vulnerability in Hikvision's Comprehensive Security Management Platform, specifically within the iSecure Center application, permits remote command execution due to improper handling of JSON data in the API. This flaw allows attackers to inject and execute commands within the installation detection process, posing significant security risks. The vulnerability has been actively exploited in the wild, highlighting the urgency for users to address this security issue by applying appropriate patches and safeguards.

References