CVE-2023-28815

9.8 criticalEPSS 1.4%

Critical (9.8). EPSS 1.4% chance of exploitation in the next 30 days.

Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation, resulting in a command injection vulnerability. Attackers may exploit this to gain platform privileges and execute arbitrary commands on the system.iSecure Center is software released for China's domestic market only, with no overseas release.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-141
Published: 2025-10-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://www.hikvision.com/cn/support/CybersecurityCenter/SecurityNotices/2023-04/

Check your stack JSON