Hikvision Isecure Center vulnerabilities

2 CVEs affecting Hikvision Isecure Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-28815, published 2025-10-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-28815, published 2025-10-17. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation, resulting in a command injection vulnerability. Attackers may exploit this to gain platform privileges…
CVE-2023-28814, published 2025-10-17. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Some versions of Hikvision's iSecure Center Product have an improper file upload control vulnerability. Due to the improper verification of file to be uploaded, attackers may upload malicious files…