CVE-2024-47485

Summary

There is a CSV injection vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could build malicious data to generate executable commands in the CSV file.

Affected Software

VendorProductVersion RangeStatus
HikvisionHikCentral Master LiteVersions between V2.0.0 and V2.2.1affected

Weaknesses

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References