Exploitation Summary
EIP tracks 1 public exploit for CVE-2025-39247. PoCs published by Sita-Technologies.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2025-39247, which targets HikCentral Professional. The exploit leverages a pre-authentication endpoint to leak the ActiveCode, allowing an attacker to reset the admin password without authentication.
Description
There is an Access Control Vulnerability in some HikCentral Professional versions. This could allow an unauthenticated user to obtain the admin permission.
Exploits (1)
This repository contains a functional exploit for CVE-2025-39247, which targets HikCentral Professional. The exploit leverages a pre-authentication endpoint to leak the ActiveCode, allowing an attacker to reset the admin password without authentication.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N