CVE-2023-28814: Hikvision iSecure Center Unrestricted File Upload
CVE-2023-28814 is a critical improper file upload weakness (CWE-434) in some versions of Hikvision's iSecure Center product, as described by the CNA. Because uploaded files are not properly verified, an attacker may be able to place malicious files on the server. The sources consulted do not list affected or fixed versions, and the vulnerability is not in CISA's KEV catalog.
Overview
CVE-2023-28814 describes an unrestricted file upload weakness (CWE-434) in some versions of Hikvision's iSecure Center product. The CNA states that improper verification of uploaded files may allow attackers to place malicious files on the server. The CNA also states that iSecure Center is released only for China's domestic market, with no overseas release.
Impact
- The CNA assigns a CVSS base score of 9.8, which corresponds to critical severity.
- The CVSS vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and high confidentiality, integrity and availability impact.
- The practical consequences depend on how the server handles uploaded files, which the record does not describe.
Affected products and versions
The record does not list any affected versions or product builds. The description only says that some versions are affected. The vendor notice linked in the references is the place to check which versions apply.
Exploitation status
The vulnerability is not listed in CISA's KEV catalog. No confirmed exploitation appears in the sources consulted. The EPSS record gives a probability of about 0.5 percent with a percentile of about 41 percent, which is a statistical estimate and not evidence of exploitation.
Remediation and mitigation
- Check the Hikvision security notice for vendor guidance and any updates for your iSecure Center installation.
- Inventory every iSecure Center deployment, including those on internal networks, since the record does not confirm which deployments are exposed.
- Restrict network access to management and upload-capable interfaces to trusted hosts only.
- The record lists no fixed version. A missing fixed version does not mean no fix exists, so confirm the status directly with the vendor.
Detection guidance
- Review web and application logs for unexpected file upload requests, especially uploads of unusual file types or from unfamiliar sources.
- Look for newly created files in directories that the application serves or executes, and compare them with an expected baseline.
- Monitor for unexpected processes started by the iSecure Center service account.
Limitations of the available information
The record provides no affected version list, no fixed version list, and no vendor advisory text beyond the link. The source status is Deferred. The title field was empty in the record, so the title here was written from the CWE and product name. Whether this software is present in any particular environment cannot be determined from the record.
Frequently asked questions
Is CVE-2023-28814 being actively exploited?
It is not listed in CISA's KEV catalog, and no confirmed exploitation appears in the sources consulted.
Which versions of iSecure Center are affected?
The record does not list affected versions. The vendor security notice linked in the references should be checked for version details.
What should administrators do now?
Confirm the vendor guidance for your installation, restrict access to upload-capable interfaces, and review logs for unexpected file uploads.
This analysis was drafted with AI assistance from verified source data and automatically checked against it.