CVE-2022-28171

🗓️ 27 Jun 2022 17:48:51Reported by hikvisionType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 128 Views🌐 WEB

The web module in Hikvision Hybrid SAN/Cluster Storage products is vulnerable to command execution due to insufficient input validation

Reporter	Title	Published	Views	Family All 15
zdt	Hikvision Remote Code Execution / XSS / SQL Injection Vulnerabilities	1 Feb 202300:00	–	zdt
zdt	Hikvision Hybrid SAN Ds-a71024 Firmware - Multiple Remote Code Execution Exploit	19 Jul 202300:00	–	zdt
GithubExploit	Exploit for OS Command Injection in Hikvision Ds-A71024_Firmware	16 Jul 202307:30	–	githubexploit
attackerkb	CVE-2022-28171	23 Jun 202207:00	–	attackerkb
Circl	CVE-2022-28171	27 Jun 202222:34	–	circl
CNNVD	Hikvision Hybrid SAN/Cluster Storage 命令注入漏洞	27 Jun 202200:00	–	cnnvd
Cvelist	CVE-2022-28171	27 Jun 202217:48	–	cvelist
Exploit DB	Hikvision Hybrid SAN Ds-a71024 Firmware - Multiple Remote Code Execution	19 Jul 202300:00	–	exploitdb
Kitploit	CVE-2022-28171-POC	5 Oct 202613:57	–	kitploit
NVD	CVE-2022-28171	27 Jun 202218:15	–	nvd

NVD

Node

AND

hikvision ds-a71024_firmwareRange≤2.3.8-6

hikvision ds-a71024Match-

Node

AND

hikvision ds-a71048_firmwareRange≤2.3.8-6

hikvision ds-a71048Match-

Node

AND

hikvision ds-a71072r_firmwareRange≤2.3.8-6

hikvision ds-a71072rMatch-

Node

AND

hikvision ds-a80624s_firmwareRange≤2.3.8-6

hikvision ds-a80624sMatch-

Node

AND

hikvision ds-a81016s_firmwareRange≤2.3.8-6

hikvision ds-a81016sMatch-

Node

AND

hikvision ds-a72024_firmwareRange≤2.3.8-6

hikvision ds-a72024Match-

Node

AND

hikvision ds-a72072r_firmwareRange≤2.3.8-6

hikvision ds-a72072rMatch-

Node

AND

hikvision ds-a80316s_firmwareRange≤2.3.8-6

hikvision ds-a80316sMatch-

Node

AND

hikvision ds-a82024d_firmwareRange≤2.3.8-6

hikvision ds-a82024dMatch-

Node

AND

hikvision ds-a71024_firmwareRange≤1.1.4

hikvision ds-a71024Match-

Node

AND

hikvision ds-a71048r-cvs_firmwareRange≤1.1.4

hikvision ds-a71048r-cvsMatch-

Node

AND

hikvision ds-a72024_firmwareRange≤1.1.4

hikvision ds-a72024Match-

Node

AND

hikvision ds-a72048r-cvs_firmwareRange≤1.1.4

hikvision ds-a72048r-cvsMatch-

[
  {
    "vendor": "hikvision",
    "product": "DS-A71024/48/72R,DS-A80624S,DS-A81016S,DS-A72024/72R,DS-A80316S,DS-A82024D",
    "versions": [
      {
        "version": "V2.X",
        "status": "affected",
        "lessThanOrEqual": "V2.3.8-6",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "hikvision",
    "product": "DS-A71024/48R-CVS,DS-A72024/48R-CVS",
    "versions": [
      {
        "version": "V1.X",
        "status": "affected",
        "lessThanOrEqual": "V1.1.4",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/170818/Hikvision-Remote-Code-Execution-XSS-SQL-Injection.html
hikvision	www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-hybrid-san-products/
packetstormsecurity	www.packetstormsecurity.com/files/173653/Hikvision-Hybrid-SAN-Ds-a71024-SQL-Injection.html

Parameter	Position	Path	Description	CWE
downloadtype	query param	/web/log/dynamic_log.php	Blind SQL injection in the downloadtype parameter leading to remote code execution.	CWE-78, CWE-89, CWE-94