PT-2025-27541 · Hikvision · Hikvision Streaming Media Management Server

Name of the Vulnerable Software and Affected Versions: Hikvision Streaming Media Management Server version 2.3.5 Description: The issue allows remote attackers to authenticate using default credentials and access restricted functionality. After authentication, an attacker can exploit an arbitrary...

VulnCheck KEV: CVE-2025-34058

Hikvision Streaming Media Management Server v2.3.5 uses default credentials that allow remote attackers to authenticate and access restricted functionality. After authenticating with these credentials, an attacker can exploit an arbitrary file read vulnerability in the /systemLog/downFile.php...

Hikvision Streaming Media Management Server 安全漏洞

Hikvision Streaming Media Management Server is a media management system from Hikvision China. A security vulnerability exists in Hikvision Streaming Media Management Server version v2.3.5, which stems from default credentials and directory traversal leading to arbitrary file reads...