CVE-2025-34058

Hikvision Streaming Media Management Server v2.3.5 uses default credentials that allow remote attackers to authenticate and access restricted functionality. After authenticating with these credentials, an attacker can exploit an arbitrary file read vulnerability in the /systemLog/downFile.php endpoint via directory traversal in the fileName parameter. This exploit chain can enable unauthorized access to sensitive system files.

CVSS v4.0

8.7 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS

0.86% chance of exploitation in the next 30 days, 56th percentile

Published

2025-07-01

Updated

2026-07-14

Proof-of-concept exploits (1)

• https://blog.csdn.net/qq_40684306/article/details/115278837

References

• CVE Record
• NVD entry

Related

• CVE-2025-34057
• CVE-2025-34059
• CVE-2025-34056
• CVE-2025-34061
• CVE-2025-34055
• CVE-2025-34065