CVE-2024-25064

Due to insufficient server-side validation, an attacker with login privileges could access certain resources that the attacker should not have access to by changing parameter values.
Configurations

Configuration 1 (hide)

cpe:2.3:a:hikvision:hikcentral_professional:*:*:*:*:*:*:*:*

History

04 Mar 2024, 22:43

Type Values Removed Values Added
First Time Hikvision
Hikvision hikcentral Professional
CPE cpe:2.3:a:hikvision:hikcentral_professional:*:*:*:*:*:*:*:*
References () https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-hikcentral-professional/ - () https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-hikcentral-professional/ - Vendor Advisory
CWE NVD-CWE-noinfo

02 Mar 2024, 03:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-03-02 03:15

Updated : 2024-03-04 22:43


NVD link : CVE-2024-25064

Mitre link : CVE-2024-25064

CVE.ORG link : CVE-2024-25064


JSON object : View

Products Affected

hikvision

  • hikcentral_professional