The vulnerability is an access control flaw in Hikvision HikCentral Professional that allows an unauthenticated attacker to obtain administrative privileges. The advisory does not provide additional details on the potential impacts beyond gaining admin permission.

Hikvision HikCentral Professional—any affected version listed by the vendor. No explicit version range is provided by the CNA, so every deployed instance should be assumed vulnerable until updated.

The CVSS score of 6.8 indicates a medium severity. EPSS is not available, and the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is remote and unauthenticated, as inferred from the description, which mentions that an unauthenticated user can obtain admin permission. If an attacker can reach the HikCentral service, the flaw can be exploited without prior authentication to elevate privileges to admin.