Threats tagged 'ghsa-q7wq-j9rx-47m6'

Certain Hikvision switch products, discontinued since December 2023, have an authenticated remote command execution vulnerability due to insufficient input validation. Attackers with valid credentials can send specially crafted packets to execute arbitrary commands on affected devices. This vulnerability has a high severity rating with a CVSS score of 7.2.