Hikvision Hikcentral Master vulnerabilities

2 CVEs affecting Hikvision Hikcentral Master, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-47486, published 2024-10-18.

More from Hikvision.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-47485, published 2024-10-18. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. There is a CSV injection vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could build malicious data to generate executable commands in the CSV file.
• CVE-2024-47486, published 2024-10-18. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. There is an XSS vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could inject scripts into certain pages by building malicious data.