CVE-2024-25063

Summary

Due to insufficient server-side validation, a successful exploit of this vulnerability could allow an attacker to gain access to certain URLs that the attacker should not have access to.

Affected Software

VendorProductVersion RangeStatus
HikvisionHikCentral ProfessionalVersions below V2.5.1 (including V2.5.1)affected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

CVE Program Container

Additional References

References