CVE-2022-28172

🗓️ 27 Jun 2022 17:50:40Reported by hikvisionType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 67 Views

Hikvision Hybrid SAN/Cluster Storage XSS vulnerability

Reporter	Title	Published	Views	Family All 10
0day.today	Hikvision Remote Code Execution / XSS / SQL Injection Vulnerabilities	1 Feb 202300:00	–	zdt
ATTACKERKB	CVE-2022-28172	23 Jun 202207:00	–	attackerkb
Circl	CVE-2022-28172	27 Jun 202222:35	–	circl
CNNVD	Hikvision Hybrid SAN/Cluster Storage 跨站脚本漏洞	27 Jun 202200:00	–	cnnvd
CNVD	Hikvision Hybrid SAN/Cluster Storage Cross-Site Scripting Vulnerability	30 Jun 202200:00	–	cnvd
Cvelist	CVE-2022-28172	27 Jun 202217:50	–	cvelist
EUVD	EUVD-2022-32626	3 Oct 202520:07	–	euvd
NVD	CVE-2022-28172	27 Jun 202218:15	–	nvd
Prion	Input validation	27 Jun 202218:15	–	prion
Positive Technologies	PT-2022-18866 · Hikvision · Hikvision Hybrid San/Cluster Storage	27 Jun 202200:00	–	ptsecurity

NVD

Node

hikvision ds-a71024_firmwareRange≤2.3.8-6

AND

hikvision ds-a71024Match-

Node

hikvision ds-a71048_firmwareRange≤2.3.8-6

AND

hikvision ds-a71048Match-

Node

hikvision ds-a71072r_firmwareRange≤2.3.8-6

AND

hikvision ds-a71072rMatch-

Node

hikvision ds-a80624s_firmwareRange≤2.3.8-6

AND

hikvision ds-a80624sMatch-

Node

hikvision ds-a81016s_firmwareRange≤2.3.8-6

AND

hikvision ds-a81016sMatch-

Node

hikvision ds-a72024_firmwareRange≤2.3.8-6

AND

hikvision ds-a72024Match-

Node

hikvision ds-a72072r_firmwareRange≤2.3.8-6

AND

hikvision ds-a72072rMatch-

Node

hikvision ds-a80316s_firmwareRange≤2.3.8-6

AND

hikvision ds-a80316sMatch-

Node

hikvision ds-a82024d_firmwareRange≤2.3.8-6

AND

hikvision ds-a82024dMatch-

Node

hikvision ds-a71024_firmwareRange≤1.1.4

AND

hikvision ds-a71024Match-

Node

hikvision ds-a71048r-cvs_firmwareRange≤1.1.4

AND

hikvision ds-a71048r-cvsMatch-

Node

hikvision ds-a72024_firmwareRange≤1.1.4

AND

hikvision ds-a72024Match-

Node

hikvision ds-a72048r-cvs_firmwareRange≤1.1.4

AND

hikvision ds-a72048r-cvsMatch-

[
  {
    "vendor": "hikvision",
    "product": "DS-A71024/48/72R,DS-A80624S,DS-A81016S,DS-A72024/72R,DS-A80316S,DS-A82024D",
    "versions": [
      {
        "version": "V2.X",
        "status": "affected",
        "lessThanOrEqual": "V2.3.8-6",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "hikvision",
    "product": "DS-A71024/48R-CVS,DS-A72024/48R-CVS",
    "versions": [
      {
        "version": "V1.X",
        "status": "affected",
        "lessThanOrEqual": "V1.1.4",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/170818/Hikvision-Remote-Code-Execution-XSS-SQL-Injection.html
hikvision	www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-hybrid-san-products/

21 Nov 2024 06:56Current

6.3Medium risk

Vulners AI Score6.3

CVSS 24.3

CVSS 3.16.1 - 6.5

EPSS0.00592

CWE-79