Hangzhou Hikvision Digital Technology Co., Ltd. HikCentral Professional
productRUA product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
0
critical
by severity
0critical2high1medium0low
updated 2026-10-30
01
vulnerabilities (5)
Related CVEs.
| ID | severity | exploitable | ||||
|---|---|---|---|---|---|---|
| CVE-2025-39247US | — | Exploit | ||||
There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated user to obtain the admin permission. | ||||||
| CVE-2025-34067US | — | — | ||||
An unauthenticated remote command execution vulnerability exists in the applyCT component of the Hikvision Integrated Security Management Platform due to the use of a vulnerable ve… | ||||||
| CVE-2024-25063US | high7.5 | — | ||||
Due to insufficient server-side validation, a successful exploit of this vulnerability could allow an attacker to gain access to certain URLs that the attacker should not have acce… | ||||||
| CVE-2024-47487US | high8.8 | — | ||||
There is a SQL injection vulnerability in some HikCentral Professional versions. This could allow an authenticated user to execute arbitrary SQL queries. | ||||||
| CVE-2024-25064US | medium4.3 | — | ||||
Due to insufficient server-side validation, an attacker with login privileges could access certain resources that the attacker should not have access to by changing parameter value… | ||||||
02
weaknesses (4)
The flaw types (CWEs) most of these CVEs share.
03
sources (1)
Which sources assert this record, and when.
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan