综合安防管理平台

HIKVISION iSecure Center - Information Leak

HIKVISION iSecure Center comprehensive security management platform is an "integrated" and "intelligent" platform. By accessing equipment such as video surveillance, all-in-one card, parking lot, alarm detection and other systems, Hikvision comprehensive security management platform information exists Information leakage (internal network centralized account password) vulnerability can be decrypted through decryption software, username and password.

Hikvision iSecure Center - File Upload

THikvision iSecure Center /center/api/files;.js has an arbitrary file upload vulnerability

Hikvision Springboot Env Actuator - Detect

The HIKVISION comprehensive security management platform has information leakage vulnerabilities, through which attackers can obtain sensitive information such as environment env for further attacks

HIKVISION 综合安防管理平台 applyCT Fastjson远程命令执行漏洞

HIKVISION iSecure Center - Remote Code Execution

Hikvision's comprehensive security management platform has a Fastjson remote command execution vulnerability, which can execute system commands and obtain system permissions and sensitive data information of the target server.

HIKVISION applyCT Fastjson - Remote Command Execution

The HIKVISION comprehensive security management platform applyCT has a remote command execution vulnerability in a low version of Fastjson, through which an attacker can execute arbitrary commands to obtain server privileges