Description
Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2024-08-01 allows execution of a command within $( ) in /center/api/installation/detection JSON data, as exploited in the wild in 2024 and 2025.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hikvision | CSMP iSecure Center | ≤ 2024-08-01 | — |