CSMP iSecure Center vulnerabilities

2 known vulnerabilities in CSMP iSecure Center from Hikvision. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.3 High severity

  CSMP iSecure Center: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-58274Oct 22, 2025HikvisionEPSS 18.2%

  Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2024-08-01 allows execution of a command within $( ) in /center/api/installation/detection JSON data, as exploited in the wild in 2024 and 2025.

• 8.3 High severity

  CSMP iSecure Center: Path Traversal: '../filedir'

  CVE-2023-53691Oct 22, 2025HikvisionEPSS 1.29%

  Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2023-06-25 allows file upload via /center/api/files directory traversal, as exploited in the wild in 2024 and 2025.