CVE-2024-25064 — Hikvision / HikCentral Professional

CVE-2024-25064

Hikvision / HikCentral Professional PUBLISHED

Description (CNA)

Due to insufficient server-side validation, an attacker with login privileges could access certain resources that the attacker should not have access to by changing parameter values.

Affected (CNA)

Vendor / product	Versions
Hikvision / HikCentral Professional	affected Versions after V2.0.0 and before V2.5.1

CWE

No CWE identifiers supplied.

References

https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-hikcentral-professional/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-hikcentral-professional/