What is CVE-2023-28815?

CVE-2023-28815 is a critical-severity vulnerability in Hikvision Isecure Center, classified under CWE-141. CVSS score: 9.8/10. Published 2025-10-17.

How severe is CVE-2023-28815?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Hikvision Isecure Center

CVE-2023-28815

Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation, resulting in a command injection vulnerability. Attackers may exploit this to gain platform privileges and execute arbitrary commands on the system.iSecure Center is software released for China's domestic market only, with no overseas release.

EPSS: 0.015 (70.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Hikvision Isecure Center — versions V1.0.0 - V1.7.0

Weakness classification (CWE)

CWE-141

References

hsrc@hikvision.com

Frequently asked questions

What is CVE-2023-28815?: CVE-2023-28815 is a critical-severity vulnerability in Hikvision Isecure Center, classified under CWE-141. CVSS score: 9.8/10. Published 2025-10-17.
How severe is CVE-2023-28815?: Critical severity. CVSS v3 base score is 9.8 out of 10.