CVE-2024-47485

5.5 mediumEPSS 0.6%

Medium (5.5) in hikvision hikcentral master. EPSS 0.6% chance of exploitation in the next 30 days.

There is a CSV injection vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could build malicious data to generate executable commands in the CSV file.

Severity

CVSS 4.0

5.5 medium

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-1236
Published: 2024-10-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hikvision:hikcentral_master

References

https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-hikcentral-product-series/

Check your stack JSON