Integrated Security Management Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:hikvision:integrated_security_management_platform:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hikvision (fb070281-910c-5fa3-9cfd-2df1ea206306) |
|---|---|
| Product | Integrated Security Management Platform (c7333345-c3bb-54f7-a154-83b4504c325e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-34067 |
vulnerable | 2026-06-08 07:19:02.132497 |
Hikvision Integrated Security Management Platform Remote Command Execution via applyCT Fastjson
An unauthenticated remote command execution vulnerability exists in the applyCT component of the Hikvision Integrated Security Management Platform due to the use of a vulnerable version of the Fastjson library. The endpoint /bic/ssoService/v1/applyCT deserializes untrusted user input, allowing an attacker to trigger Fastjson's auto-type feature to load arbitrary Java classes. By referencing a malicious class via an LDAP URL, an attacker can achieve remote code execution on the underlying system. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC.
Published: 2025-07-02T13:44:21.664Z
Updated: 2026-07-14T22:25:42.705Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.