What is the CVSS score of CVE-2025-39240?

CVE-2025-39240 has a CVSS 3.1 base score of 7.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Hikvision are affected by CVE-2025-39240?

Hikvision Wireless Access Points are vulnerable to remote command execution by authenticated users, potentially allowing attackers with valid credentials to gain full control of network…

How to fix or mitigate CVE-2025-39240?

Within 24 hours: Inventory all Hikvision Wireless Access Points and identify affected models; restrict administrative access to essential personnel only and enforce strong password policies. Within 7 days: Implement network segmentation to isolate access points from critical systems; disable remote management features if not essential; monitor authentication logs for suspicious activity. Within 30 days: Monitor Hikvision security advisories for patch availability; evaluate replacement devices from alternative vendors if patches are not released; conduct access point firmware audits.

Hikvision CVE-2025-39240

EUVD-2025-18247 HIGH

OS Command Injection (CWE-78)

2025-06-13 hsrc@hikvision.com

Command Injection Hikvision RCE Authentication Bypass

7.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.2 HIGH

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 14, 2026 - 21:34 euvd

EUVD-2025-18247

Analysis Generated

Mar 14, 2026 - 21:34 vuln.today

CVE Published

Jun 13, 2025 - 08:15 nvd

HIGH 7.2

DescriptionCVE.org

Some Hikvision Wireless Access Point are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution.

AnalysisAI

CVE-2025-39240 is an authenticated remote command execution vulnerability in Hikvision Wireless Access Points caused by insufficient input validation in packet handling. Attackers with valid credentials can send crafted packets to execute arbitrary commands on affected devices, potentially achieving full system compromise. The vulnerability has a CVSS 7.2 score reflecting high confidentiality, integrity, and availability impact, though it requires valid authentication credentials to exploit.

Technical ContextAI

This vulnerability resides in Hikvision Wireless Access Point firmware and affects the command processing pipeline. The root cause is CWE-78 (Improper Neutralization of Special Elements used in an OS Command), indicating that user-supplied input from authenticated API/packet handlers is passed unsanitized to OS command execution functions (likely via system() or equivalent calls). The vulnerability exists in network-facing services that accept authenticated connections, processing malformed packets without proper input validation or sanitization. Affected CPE pattern: cpe:2.3:a:hikvision:wireless_access_point:*:*:*:*:*:*:*:* (specific version ranges to be determined from vendor advisory). The attack surface includes device management interfaces, API endpoints, or protocol handlers that parse incoming packets from authenticated users.

RemediationAI

Immediate Actions: (1) Apply firmware patches released by Hikvision (version numbers to be provided in official advisory; monitor Hikvision support portal and CISA alerts). (2) Restrict network access to WAP management interfaces using firewall rules—limit to trusted administrative subnets only. (3) Enforce strong authentication: disable default credentials, enforce complex passwords, and implement multi-factor authentication on device APIs if available. (4) Monitor device logs for suspicious authenticated API calls or command patterns. (5) Segment wireless infrastructure from critical systems. Workarounds (pre-patch): (a) Disable remote management features if not required (CLI/API). (b) Use VPN or bastion hosts for all device administration. (c) Implement rate limiting and IDS signatures for malformed packet detection. (d) Audit user accounts and revoke unnecessary privileges. Long-term: Subscribe to Hikvision security bulletins, establish patch management procedures for network infrastructure, and conduct periodic privilege access reviews.