HikCentral Professional vulnerabilities

3 known vulnerabilities in HikCentral Professional from Hikvision. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  HikCentral Professional: Improper Access Control

  CVE-2025-39247Aug 29, 2025Hikvision

  There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated user to obtain the admin permission.

• 8.8 High severity

  HikCentral Professional: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-47487Oct 18, 2024Hikvision

  There is a SQL injection vulnerability in some HikCentral Professional versions. This could allow an authenticated user to execute arbitrary SQL queries.

• 7.5 High severity

  HikCentral Professional: Improper Authorization

  CVE-2024-25063Mar 2, 2024Hikvision

  Due to insufficient server-side validation, a successful exploit of this vulnerability could allow an attacker to gain access to certain URLs that the attacker should not have access to.