CVE-2025-39246

Medium

There is an Unquoted Service Path Vulnerability in some HikCentral FocSign versions. This could allow an authenticated user to potentially…

hikvision·CWE-428·Published 2025-08-29

CVSS

5.3

EPSS

0.00

KEV

Exploits

cve.orgen

187 chars

There is an Unquoted Service Path Vulnerability in some HikCentral FocSign versions. This could allow an authenticated user to potentially enable escalation of privilege via local access.

NVDen

187 chars

There is an Unquoted Service Path Vulnerability in some HikCentral FocSign versions. This could allow an authenticated user to potentially enable escalation of privilege via local access.

Hay una vulnerabilidad de ruta de servicio sin comillas en algunas versiones de HikCentral FocSign. Esto podría permitir a un usuario autenticado habilitar potencialmente la escalada de privilegios a través de acceso local.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	5.3	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
3.1	Secondary	NVD	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N