CVE-2025-34067

creationtimestamp| type| source ---|---|--- 2025-07-04 02:56:10+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lt4algwsbr22 2025-07-05 14:48:11+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3lt7ytg4ko22u 2025-07-05 21:02:18+00:00| seen|...

CVE-2025-34067 Hikvision Integrated Security Management Platform Remote Command Execution via applyCT Fastjson

An unauthenticated remote command execution vulnerability exists in the applyCT component of the Hikvision Integrated Security Management Platform due to the use of a vulnerable version of the Fastjson library. The endpoint /bic/ssoService/v1/applyCT deserializes untrusted user input, allowing an...