CVE-2023-53691: High severity Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center vulnerability
Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2023-06-25 allows file upload via /center/api/files directory traversal, as exploited in the wild in 2024 and 2025.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53691?
CVE-2023-53691 is considered a critical vulnerability due to its potential for remote file uploads through directory traversal.
How do I fix CVE-2023-53691?
To fix CVE-2023-53691, update the Hikvision CSMP iSecure Center to a version released after June 25, 2023.
What systems are affected by CVE-2023-53691?
CVE-2023-53691 affects Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center versions up to and including 2023-06-25.
What kind of attack can be executed using CVE-2023-53691?
CVE-2023-53691 allows attackers to exploit directory traversal to perform unauthorized file uploads.
Is CVE-2023-53691 being actively exploited?
Yes, CVE-2023-53691 has been observed being exploited in the wild specifically in 2024 and 2025.