CVE-2025-39240 HIGH

CVE-2025-39240

Vendor Hikvision
Product DS-3WAP622G-SI
Published June 13, 2025
Last update June 17, 2025

CVSS base score

7.2/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Some Hikvision Wireless Access Point are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution.

Key dates

02Disclosure timeline

June 13, 2025 CVE published
June 17, 2025 Record updated