CVE-2024-25064
Assigner: hikvision
Published: 2024-03-02T02:56:19.821Z
State: PUBLISHED
descriptions: value: Due to insufficient server-side validation, an attacker with login privileges could access certain resources that the attacker should not have access to by changing parameter values.
affected: vendor: Hikvision
product: HikCentral Professional
versions: version: Versions after V2.0.0 and before V2.5.1
status: affected
credits: value: Abdulazeez Omar
type: finder
metrics: format: CVSS
scenarios: value: GENERAL
cvssV3_1: version: 3.1
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
x_generator: engine: cveClient/1.0.15