CVE-2025-39246CWE-428

CVE-2025-39246

Medium · published August 29, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
26.7
In the wild
Unconfirmed
What it is

There is an Unquoted Service Path Vulnerability in some HikCentral FocSign versions. This could allow an authenticated user to potentially enable escalation of privilege via local access.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00344 · 26.7th percentile
Weakness
CWE-428 · Unquoted Search Path or Element
Published
2025-08-29T07:15Z
References (1)
https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikcentral-products/ · [email protected]
EPSS history
Timeline
  • 29 AUG 01:39Z
    There is an Unquoted Service Path Vulnerability in some HikCentral FocSign versions
    cvelistv5