PT-2024-7352 · Hikvision · Hikcentral Master Lite

Manh Doan Duc + 1 · Published 2024-10-18 · Updated 2024-10-22 · CVE-2024-47485

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: HikCentral Master Lite versions (affected versions not specified)

Description: The issue is related to a CSV injection vulnerability. This vulnerability can be exploited to allow an attacker to create malicious data and generate executable commands in the CSV file. The exploitation of this vulnerability may enable an attacker to execute arbitrary commands.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-1236

Related Identifiers

BDU:2024-08714

CVE-2024-47485

Affected Products

Hikcentral Master Lite

References · 9

• https://osv.dev/vulnerability/CVE-2024-47485 · Vendor Advisory
• https://hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-hikcentral-product-series · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-47485 · Security Note
• https://bdu.fstec.ru/vul/2024-08714 · Security Note
• https://twitter.com/VulmonFeeds/status/1847228459421958340 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1847213879853773122 · Twitter Post
• https://t.me/cvenotify/98723 · Telegram Post
• https://t.me/cvedetector/8307 · Telegram Post
• https://twitter.com/CVEnew/status/1847199254911078480 · Twitter Post