high8.8

CVE-2024-47487

There is a SQL injection vulnerability in some HikCentral Professional versions.

Impact

There is a SQL injection vulnerability in some HikCentral Professional versions. This could allow an authenticated user to execute arbitrary SQL queries.

Affected products

Vendor	Product	Affected versions
Hikvision	Hikcentral Professional	from 2.0.0 before 2.6.1

Weakness classification

CWE-89

References

NVD record
CVE.org record
https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-hikcentral-product-series/