Hikvision iSecure Center vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Hikvision iSecure Center: 2 record(s), with affected versions and fixes.
CVE-2023-28815
Critical · 9.8
CWE-141 Oct 17, 2025
Hikvision iSecure Center Command Injection (CVE-2023-28815)
Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation, resulting in a command injection vulnerability. Attackers may exploit this to gain platform privileges and execute arbitrary commands on the system.iSecure Center is software released for China's domestic market only, with no overseas release.
CVE-2023-28814
Critical · 9.8
CWE-434 Oct 17, 2025
Hikvision iSecure Center Unrestricted File Upload (CVE-2023-28814)
Some versions of Hikvision's iSecure Center Product have an improper file upload control vulnerability. Due to the improper verification of file to be uploaded, attackers may upload malicious files to the server. iSecure Center is software released for China's domestic market only, with no overseas release.