High · 7.2 CVE-2024-47487 EUVD-2024-42493GHSA-2252-mjp4-2v5j

There is a SQL injection vulnerability in some HikCentral Professional versions. This could allow an authenticated user to execute arbitrar…

Published Oct 18, 2024 · Updated Mar 19, 2025 · Assigned by hikvision

Vendor: Hikvision Product: HikCentral Professional

Description

There is a SQL injection vulnerability in some HikCentral Professional versions. This could allow an authenticated user to execute arbitrary SQL queries.

Affected products

Vendor	Product	Affected	Fixed
Hikvision	HikCentral Professional	Versions between V2.0.0 and V2.6.0	—

References

https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-hikcentral-product-series/