Hikvision Csmp Isecure Center vulnerabilities

2 CVEs affecting Hikvision Csmp Isecure Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-58274, published 2025-10-22.

More from Hikvision.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-58274, published 2025-10-22. High severity, CVSS 8.3. EPSS: 19.1% chance of exploitation in the next 30 days. Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2024-08-01 allows execution of a command within $( ) in /center/api/installation/detection JSON data, as exploited…
• CVE-2023-53691, published 2025-10-22. High severity, CVSS 8.3. EPSS: 1.3% chance of exploitation in the next 30 days. Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2023-06-25 allows file upload via /center/api/files directory traversal, as exploited in the wild in 2024 and 2025.