What is CVE-2023-28815?

CVE-2023-28815 is a critical-severity vulnerability in Hikvision Isecure Center, classified under CWE-141. CVSS score: 9.8/10. Published 2025-10-17.

How severe is CVE-2023-28815?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Hikvision Isecure Center

CVE-2023-28815

Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation, resulting in a command injection vulnerability. Attackers may exploit this to gain platform privileges and execute arbitrary commands on the sys…

EPSS: 0.015 (70.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Hikvision Isecure Center — versions V1.0.0 - V1.7.0

Weakness classification (CWE)

CWE-141

References

hsrc@hikvision.com

Frequently asked questions

What is CVE-2023-28815?: CVE-2023-28815 is a critical-severity vulnerability in Hikvision Isecure Center, classified under CWE-141. CVSS score: 9.8/10. Published 2025-10-17.
How severe is CVE-2023-28815?: Critical severity. CVSS v3 base score is 9.8 out of 10.