← Database

CVE-2022-28171

HIGH CVSS: 7.5 Published: 2022-06-27 Modified: 2026-06-17

Description

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to execute restricted commands by sending messages with malicious commands to the affected device.

Affected Platforms

Hikvision Ds-A72024 FirmwareHikvision Ds-A72072RHikvision Ds-A80316SHikvision Ds-A71024 FirmwareHikvision Ds-A80316S FirmwareHikvision Ds-A72048R-CvsHikvision Ds-A81016SHikvision Ds-A72072R FirmwareHikvision Ds-A72024Hikvision Ds-A71072R

Weakness Type

CWE-78, CWE-77

References