CVE-2024-58274

high · 8.3

Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2024-08-01 allows execution of a command within $( ) in /center/api/installation/detection JSON data, as exploited in the wild in 2024 and 2025.

8.3

CVSS

17.9%

EPSS (exploit prob.)

97th

EPSS percentile

2025-10-22

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

Weaknesses

CWE-78

References

https://forum.butian.net/article/498
https://github.com/ahisec/nuclei-tps/blob/main/http/vulnerabilities/hikvision/hikvision-csmp-installation-rce.yaml
https://xz.aliyun.com/news/14639
https://xz.aliyun.com/news/14639

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2024-58274