CVE-2023-28815: Command Injection
Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation, resulting in a command injection vulnerability. Attackers may exploit this to gain platform privileges and execute arbitrary commands on the system.iSecure Center is software released for China's domestic market only, with no overseas release.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-28815?
CVE-2023-28815 has been classified as a critical vulnerability due to its potential for command injection and unauthorized system access.
How do I fix CVE-2023-28815?
To mitigate CVE-2023-28815, ensure that you apply the latest security patches and updates released by Hikvision for the iSecure Center software.
What are the risks associated with CVE-2023-28815?
Exploiting CVE-2023-28815 allows attackers to gain platform privileges and execute arbitrary commands on the compromised system.
Which products are affected by CVE-2023-28815?
CVE-2023-28815 affects certain versions of Hikvision's iSecure Center software.
How can I detect if my system is vulnerable to CVE-2023-28815?
You can check the version of your Hikvision iSecure Center software against the affected versions listed in Hikvision's security notices.