【中文导读】该 CVE 涉及路径遍历（高危风险）。具体受影响产品、版本和修复方案以 NVD/厂商公告为准。 【原始描述】Hikvision CSMP (Comprehensive Security Management Platform) iSecure Center through 2023-06-25 allows file upload via /center/api/files directory traversal, as exploited in the wild in 2024 and 2025.