Description (CNA)
Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2023-06-25 allows file upload via /center/api/files directory traversal, as exploited in the wild in 2024 and 2025.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Hikvision / CSMP iSecure Center | affected 0 through 2023-06-25 |
CWE
CWE-24
References
ADP enrichment
No English description supplied.