Vulnerability · Published Oct 17, 2025 · Assigned by hikvision
CVE-2023-28815
Critical 9.8
In plain English
A critical-severity security flaw in iSecure Center from Hikvision. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 73% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)1.4%top 27.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation, resulting in a command injection vulnerability. Attackers may exploit this to gain platform privileges and execute arbitrary commands on the system.iSecure Center is software released for China's domestic market only, with no overseas release.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Hikvision | iSecure Center | V1.0.0 - V1.7.0 |
Weakness: CWE-141 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H