CVE-2025-39247CWE-284broken-access-control

CVE-2025-39247

High · published August 29, 2025

CVSS v3.1
8.6
EPSS
0%
Percentile
39.2
In the wild
Unconfirmed
What it is

There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated user to obtain the admin permission.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00463 · 39.2th percentile
Weakness
CWE-284 · Improper Access Control
Published
2025-08-29T07:15Z
References (1)
https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-some-hikcentral-products/ · [email protected]
EPSS history
Timeline
  • 29 AUG 01:40Z
    There is an Access Control Vulnerability in some HikCentral Professional versions
    cvelistv5