Hikvision iSecure Center Improper File Upload Vulnerability

A vulnerability allowing arbitrary file upload has been identified in Hikvision's iSecure Center software, versions 1.0.0 prior to 1.7.0. This issue arises from inadequate validation of uploaded files, enabling attackers to upload malicious files to the server. The vulnerability could lead to unauthorized access to service permissions or cause abnormal service behavior.

Impact

Exploitation of this vulnerability could result in unauthorized file uploads, potentially leading to execution of malicious files on the server or disruption of normal service operations.

Remediation

Users can download the patch for this vulnerability from the Hikvision download link provided in the official security notice. For technical support, Hikvision users can contact HSRC via email.