CVE-2022-28172
 
Severity Score
6.1
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to XSS attack by sending messages with malicious commands to the affected device.
El módulo web de algunos productos Hikvision Hybrid SAN/Cluster Storage presenta la siguiente vulnerabilidad de seguridad. Debido a una insuficiente comprobación de entrada, un atacante puede aprovechar la vulnerabilidad para realizar un ataque de tipo XSS mediante el envío de mensajes con comandos maliciosos al dispositivo afectado
*Credits:
Thurein Soe
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2022-03-29 CVE Reserved
- 2022-06-27 CVE Published
- 2024-01-18 EPSS Updated
- 2024-09-17 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (2)
URL | Tag | Source |
---|---|---|
http://packetstormsecurity.com/files/170818/Hikvision-Remote-Code-Execution-XSS-SQL-Injection.html | Third Party Advisory |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Hikvision Search vendor "Hikvision" | Ds-a71024 Firmware Search vendor "Hikvision" for product "Ds-a71024 Firmware" | <= 2.3.8-6 Search vendor "Hikvision" for product "Ds-a71024 Firmware" and version " <= 2.3.8-6" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-a71024 Search vendor "Hikvision" for product "Ds-a71024" | - | - |
Safe
|
Hikvision Search vendor "Hikvision" | Ds-a71048 Firmware Search vendor "Hikvision" for product "Ds-a71048 Firmware" | <= 2.3.8-6 Search vendor "Hikvision" for product "Ds-a71048 Firmware" and version " <= 2.3.8-6" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-a71048 Search vendor "Hikvision" for product "Ds-a71048" | - | - |
Safe
|
Hikvision Search vendor "Hikvision" | Ds-a71072r Firmware Search vendor "Hikvision" for product "Ds-a71072r Firmware" | <= 2.3.8-6 Search vendor "Hikvision" for product "Ds-a71072r Firmware" and version " <= 2.3.8-6" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-a71072r Search vendor "Hikvision" for product "Ds-a71072r" | - | - |
Safe
|
Hikvision Search vendor "Hikvision" | Ds-a80624s Firmware Search vendor "Hikvision" for product "Ds-a80624s Firmware" | <= 2.3.8-6 Search vendor "Hikvision" for product "Ds-a80624s Firmware" and version " <= 2.3.8-6" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-a80624s Search vendor "Hikvision" for product "Ds-a80624s" | - | - |
Safe
|
Hikvision Search vendor "Hikvision" | Ds-a81016s Firmware Search vendor "Hikvision" for product "Ds-a81016s Firmware" | <= 2.3.8-6 Search vendor "Hikvision" for product "Ds-a81016s Firmware" and version " <= 2.3.8-6" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-a81016s Search vendor "Hikvision" for product "Ds-a81016s" | - | - |
Safe
|
Hikvision Search vendor "Hikvision" | Ds-a72024 Firmware Search vendor "Hikvision" for product "Ds-a72024 Firmware" | <= 2.3.8-6 Search vendor "Hikvision" for product "Ds-a72024 Firmware" and version " <= 2.3.8-6" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-a72024 Search vendor "Hikvision" for product "Ds-a72024" | - | - |
Safe
|
Hikvision Search vendor "Hikvision" | Ds-a72072r Firmware Search vendor "Hikvision" for product "Ds-a72072r Firmware" | <= 2.3.8-6 Search vendor "Hikvision" for product "Ds-a72072r Firmware" and version " <= 2.3.8-6" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-a72072r Search vendor "Hikvision" for product "Ds-a72072r" | - | - |
Safe
|
Hikvision Search vendor "Hikvision" | Ds-a80316s Firmware Search vendor "Hikvision" for product "Ds-a80316s Firmware" | <= 2.3.8-6 Search vendor "Hikvision" for product "Ds-a80316s Firmware" and version " <= 2.3.8-6" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-a80316s Search vendor "Hikvision" for product "Ds-a80316s" | - | - |
Safe
|
Hikvision Search vendor "Hikvision" | Ds-a82024d Firmware Search vendor "Hikvision" for product "Ds-a82024d Firmware" | <= 2.3.8-6 Search vendor "Hikvision" for product "Ds-a82024d Firmware" and version " <= 2.3.8-6" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-a82024d Search vendor "Hikvision" for product "Ds-a82024d" | - | - |
Safe
|
Hikvision Search vendor "Hikvision" | Ds-a71024 Firmware Search vendor "Hikvision" for product "Ds-a71024 Firmware" | <= 1.1.4 Search vendor "Hikvision" for product "Ds-a71024 Firmware" and version " <= 1.1.4" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-a71024 Search vendor "Hikvision" for product "Ds-a71024" | - | - |
Safe
|
Hikvision Search vendor "Hikvision" | Ds-a71048r-cvs Firmware Search vendor "Hikvision" for product "Ds-a71048r-cvs Firmware" | <= 1.1.4 Search vendor "Hikvision" for product "Ds-a71048r-cvs Firmware" and version " <= 1.1.4" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-a71048r-cvs Search vendor "Hikvision" for product "Ds-a71048r-cvs" | - | - |
Safe
|
Hikvision Search vendor "Hikvision" | Ds-a72024 Firmware Search vendor "Hikvision" for product "Ds-a72024 Firmware" | <= 1.1.4 Search vendor "Hikvision" for product "Ds-a72024 Firmware" and version " <= 1.1.4" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-a72024 Search vendor "Hikvision" for product "Ds-a72024" | - | - |
Safe
|
Hikvision Search vendor "Hikvision" | Ds-a72048r-cvs Firmware Search vendor "Hikvision" for product "Ds-a72048r-cvs Firmware" | <= 1.1.4 Search vendor "Hikvision" for product "Ds-a72048r-cvs Firmware" and version " <= 1.1.4" | - |
Affected
| in | Hikvision Search vendor "Hikvision" | Ds-a72048r-cvs Search vendor "Hikvision" for product "Ds-a72048r-cvs" | - | - |
Safe
|