VULNERABILITY INTELLIGENCE

CVE-2023-28814

CVSS score9.8 CRITICAL
EPSS probability0.50%
CISA KEVNot currently listed
Published2025-10-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Some versions of Hikvision's iSecure Center Product have an improper file upload control vulnerability. Due to the improper verification of file to be uploaded, attackers may upload malicious files to the server. iSecure Center is software released for China's domestic market only, with no overseas release.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-434

Primary references