Hikvision iSecure Center

• CVE-2023-28815 Critical 9.8 Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation, resulting in a command injection vulnerability. Attackers may exploit this to gain platform privileges an 1.4%
• CVE-2023-28814 Critical 9.8 Some versions of Hikvision's iSecure Center Product have an improper file upload control vulnerability. Due to the improper verification of file to be uploaded, attackers may upload malicious files to 0.5%