CVE-2025-34058

Hikvision Streaming Media Management Server Default Credentials and Authenticated Arbitrary File Read

State: Published
Severity: 8.7 High
Published: Jul 1, 2025
Updated: Jul 14, 2026
Reserved: Apr 15, 2025

Description

Hikvision Streaming Media Management Server v2.3.5 uses default credentials that allow remote attackers to authenticate and access restricted functionality. After authenticating with these credentials, an attacker can exploit an arbitrary file read vulnerability in the /systemLog/downFile.php endpoint via directory traversal in the fileName parameter. This exploit chain can enable unauthorized access to sensitive system files.

Scores

CVSS	Score	Vector	Source
4.0	8.7 High	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N	VulnCheck

Weaknesses

CWE-521 Weak Password Requirements
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected Products

Product	Versions
Streaming Media Management ServerHangzhou Hikvision System Technology	2.3.5Affected

References

https://www.cnvd.org.cn/flaw/show/CNVD-2021-14544third-party-advisory
https://blog.csdn.net/qq_40684306/article/details/115278837exploit
https://www.hikvision.com/en/support/cybersecurity/security-advisory/product
https://vulncheck.com/advisories/hikvision-streaming-server-default-creds-file-readthird-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.