CVE-2025-34067

🗓️ 02 Jul 2025 13:44:21Reported by VulnCheckType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 377 Views🌐 WEB

Unauthenticated remote command execution vulnerability in Hikvision HikCentral due to Fastjson library.

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	Fastjson applyCT Code Execution	9 Jul 202500:00	–	bdu_fstec
Circl	CVE-2025-34067	4 Jul 202502:56	–	circl
CNNVD	Hikvision HikCentral security vulnerabilities	2 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-34067 Hikvision Integrated Security Management Platform Remote Command Execution via applyCT Fastjson	2 Jul 202513:44	–	cvelist
EUVD	EUVD-2025-19719	3 Oct 202520:07	–	euvd
NVD	CVE-2025-34067	2 Jul 202514:15	–	nvd
Positive Technologies	PT-2025-27626	27 Jul 202300:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2025-34067: Deserialization of Untrusted Data	2 Jul 202500:00	–	rapid7
RedhatCVE	CVE-2025-34067	4 Jul 202514:22	–	redhatcve
The Hacker News	⚡ Weekly Recap: Chrome 0-Day, Ivanti Exploits, MacOS Stealers, Crypto Heists and More	7 Jul 202511:26	–	thn

CNA

Node

avaya integrated_managementMatch0

[
  {
    "defaultStatus": "unaffected",
    "modules": [
      "/bic/ssoService/v1/applyCT HTTP endpoint"
    ],
    "product": "Integrated Security Management Platform",
    "vendor": "Hikvision",
    "versions": [
      {
        "status": "affected",
        "version": "0"
      }
    ]
  }
]

Source	Link
s4e	www.s4e.io/tools/hikvision-applyct-remote-code-execution
vulncheck	www.vulncheck.com/advisories/hikvision-ismp-rce-applyct
github	www.github.com/PeiQi0/PeiQi-WIKI-Book/blob/main/docs/wiki/iot/HIKVISION/HIKVISION%20%E7%BB%BC%E5%90%88%E5%AE%89%E9%98%B2%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0%20applyCT%20Fastjson%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md

Parameter	Position	Path	Description	CWE
request body	request body	/bic/ssoService/v1/applyCT	The /bic/ssoService/v1/applyCT endpoint deserializes untrusted user input using a vulnerable version of the Fastjson library, allowing for remote command execution via the auto-type feature.	CWE-502