CVE-2025-392407.2HighCWE-78

CVE-2025-39240: Hikvision DS-3WAP622G-SI vulnerability

Hikvision · DS-3WAP622G-SI

Affected: Hikvision DS-3WAP622G-SI · Exploitation: possible (1 to 10%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

1.5%probability of exploitation in the next 30 days

74th percentile

050100

Higher than 74% of scored CVEs

7.2HighCVSS 3.1

LowMediumHighCrit.

DescriptionCVE.org

Some Hikvision Wireless Access Point are vulnerable to authenticated remote command execution due to insufficient input validation. Attackers with valid credentials can exploit this flaw by sending crafted packets containing malicious commands to affected devices, leading to arbitrary command execution.

Affected products6

From the CVE record. A product or version that is not listed is unknown, not unaffected.

Hikvision · DS-3WAP622G-SIV1.1.5402 build241014（E2254P02）and the versions prior to it
Hikvision · DS-3WAP623E-SIV1.1.5400 build240814（E2254）and the versions prior to it
Hikvision · DS-3WAP521-SIV1.1.5400 build240814（E2254）and the versions prior to it
Hikvision · DS-3WAP522-SIV1.1.5402 build241014（E2254P02）and the versions prior to it
Hikvision · DS-3WAP621E-SIV1.1.5400 build240814（E2254）and the versions prior to it
Hikvision · DS-3WAP622E-SIV1.1.5402 build241014（E2254P02）and the versions prior to it

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Possible (1 to 10%). EPSS between 1% and 10%.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: OS Command Injection · Command and Code Injection
Vendor: Hikvision
Published: June 2025
Band: Possible (1 to 10%), June 2025

CoverageNo articles yet

No CyberSIXT article names CVE-2025-39240 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.