Due to insufficient server-side validation, an attacker with login privileges could access certain resources that the attacker should not have access to by changing parameter values.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Hikcentral_professional | Hikvision | 2.0.0 (including) | 2.5.1 (excluding) |