CVE-2022-28171-POC

CVE-2022-28171-POC 이 글은 원래 ExploitDB에 게시했으며, 다음 주소에서 확인할 수 있습니다: https://www.exploit-db.com/exploits/51607 Hikvision Hybrid SAN Ds-a71024 Firmware - 다중 원격 코드 실행 Date: 16 July 2023 Exploit Author: Thurein Soe CVE : CVE-2022-28171 Reference Link: https://cve.report/CVE-2022-28171 Vulnerable Version...

EUVD-2022-32626

Malicious code in bioql PyPI...

Hikvision Hybrid SAN Ds-a71024 Firmware - Multiple Remote Code Execution Exploit

Exploit Title: Hikvision Hybrid SAN Ds-a71024 Firmware - Multiple Remote Code Execution Exploit Author: Thurein Soe CVE : CVE-2022-28171 Vendor Homepage: https://www.hikvision.com Software Link: N/A Refence Link: https://cve.report/CVE-2022-28171 Version: Filmora 12: Ds-a71024 Firmware, Ds-a71024...

Hikvision Hybrid SAN Ds-a71024 Firmware - Multiple Remote Code Execution

Exploit Title: Hikvision Hybrid SAN Ds-a71024 Firmware - Multiple Remote Code Execution Date: 16 July 2023 Exploit Author: Thurein Soe CVE : CVE-2022-28171 Vendor Homepage: https://www.hikvision.com Software Link: N/A Refence Link: https://cve.report/CVE-2022-28171 Version: Filmora 12: Ds-a71024...

The vulnerability of microprogramming software in Hikvision Hybrid SAN storage systems, related to access control errors, allows attackers to elevate their privileges to the level of administrators.

The vulnerability of the microprogramming software of Hikvision Hybrid SAN storage systems is related to access control errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to elevate their privileges to the level of an administrator...

CVE-2023-28808: Improper Access Control

Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the admin permission. The attacker can exploit the vulnerability by sending crafted messages to the affected devices...

PT-2023-2441

Name of the Vulnerable Software and Affected Versions Hikvision Hybrid SAN/Cluster Storage products affected versions not specified Description The issue is related to access control errors in the software, allowing a remote attacker to exploit the vulnerability and gain administrator privileges...

Hikvision Hybrid SAN/Cluster Storage Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in Hikvision Hybrid SAN/Cluster Storage, a series of affordable and reliable hybrid SAN storage area network products from Hikvision, China. vulnerability stems from insufficient input validation in the web module. An attacker could exploit the...

CVE-2022-28172

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to XSS attack by sending messages with malicious commands to the affected device...

CVE-2022-28171

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to execute restricted commands by sending messages with malicious commands to the affected device...

CVE-2022-28171

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to execute restricted commands by sending messages with malicious commands to the affected device...

CVE-2022-28171: Improper Neutralization of Special Elements used in an OS Command

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to execute restricted commands by sending messages with malicious commands to the affected device...

CVE-2022-28172: Improper Neutralization of Input During Web Page Generation

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to XSS attack by sending messages with malicious commands to the affected device...