Medium · 4.7 CVE-2025-39245 EUVD-2025-26200GHSA-fqmj-v992-7vw6

There is a CSV Injection Vulnerability in some HikCentral Master Lite versions. This could allow an attacker to inject executable commands …

Published Aug 29, 2025 · Updated Aug 29, 2025 · Assigned by hikvision

Vendor: Hikvision Product: HikCentral Master Lite

Description

There is a CSV Injection Vulnerability in some HikCentral Master Lite versions. This could allow an attacker to inject executable commands via malicious CSV data.

Affected products

Vendor	Product	Affected	Fixed
Hikvision	HikCentral Master Lite	Versions between V2.2.1 and V2.3.2	—

References

https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikcentral-products/