← Database

CVE-2022-28173

CRITICAL CVSS: 9.1 Published: 2022-12-19 Modified: 2026-06-17

Description

The web server of some Hikvision wireless bridge products have an access control vulnerability which can be used to obtain the admin permission. The attacker can exploit the vulnerability by sending crafted messages to the affected devices.

Affected Platforms

Hikvision Ds-3Wf0Ac-2NtHikvision Ds-3Wf0Ac-2Nt FirmwareHikvision Ds-3Wf01C-2N\/OHikvision Ds-3Wf01C-2N\/O Firmware

Weakness Type

CWE-284, NVD-CWE-Other

References