CVE-2024-47487 HIGH

CVE-2024-47487

Vendor Hikvision
Product HikCentral Professional
Published October 18, 2024
Last update March 19, 2025
View on NVD All CVEs

CVSS base score

7.2/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:L/SC:L/SI:L/SA:L

What the vulnerability does

01Description

There is a SQL injection vulnerability in some HikCentral Professional versions. This could allow an authenticated user to execute arbitrary SQL queries.

Key dates

02Disclosure timeline

October 18, 2024 CVE published
March 19, 2025 Record updated