Hikvision iSecure Center Command Injection Vulnerability Allowing Privilege Escalation

A command injection vulnerability has been identified in Hikvision's iSecure Center product, which is available only in the domestic Chinese market. This vulnerability arises from inadequate parameter validation, allowing attackers to execute arbitrary commands on the system and gain platform privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of commands on the affected system, potentially allowing an attacker to escalate privileges.

Remediation

Users can download the patch for this vulnerability from the Hikvision download link provided in the official security notice. For technical support, Hikvision users can contact HSRC via email or fill out a feedback request.