CVE-2025-39246: Medium severity Hikvision HikCentral FocSign vulnerability
Published Aug 29, 2025
·Updated
There is an Unquoted Service Path Vulnerability in some HikCentral FocSign versions. This could allow an authenticated user to potentially enable escalation of privilege via local access.
Affected Software
1 affected component
Hikvision HikCentral FocSign
Event History
Aug 29, 2025
CVE Published
via MITRE·01:39 AM
Data Sourced
via MITRE·01:39 AM
DescriptionSeverity
Data Sourced
via NVD·03:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-39246?
CVE-2025-39246 has been classified as a potential moderate severity vulnerability due to its ability to enable privilege escalation.
2
What systems are affected by CVE-2025-39246?
CVE-2025-39246 affects certain versions of Hikvision's HikCentral FocSign.
3
How do I fix CVE-2025-39246?
To mitigate CVE-2025-39246, ensure that you apply the latest updates provided by Hikvision for HikCentral FocSign.
4
Can CVE-2025-39246 be exploited remotely?
CVE-2025-39246 requires authenticated local access to be exploited, making it less likely to be exploited remotely.
5
Who is affected by CVE-2025-39246?
Authenticated users of the affected HikCentral FocSign versions could potentially be impacted by CVE-2025-39246.