Critical severity9.8NVD Advisory· Published Oct 18, 2024· Updated Jun 17, 2026

CVE-2024-47485

Description

There is a CSV injection vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could build malicious data to generate executable commands in the CSV file.

Affected products

Hikvision/Hikcentral Master
cpe:2.3:a:hikvision:hikcentral_master:*:*:*:*:lite:*:*:*
Range: >=2.0.0,<2.3.0
HikCentral/HikCentral Master Litellm-create
Hikvision/HikCentral FocSignllm-fuzzy
Hikvision/HikCentral Master Litecpe-rescue
Range: Versions between V2.0.0 and V2.2.1

Patches

Vulnerability mechanics

References

www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-hikcentral-product-series/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000