CVE-2022-28172 in Hybrid SANinformation

Résumé

par MITRE • 27/06/2022

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to XSS attack by sending messages with malicious commands to the affected device.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Réserver

29/03/2022

Divulgation

27/06/2022

Modérer

accepté

Entrée

VDB-202841

CPE

prêt

EPSS

0.00763

KEV

non

Activités

très faible

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2022-28172
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2022-28172
CVE Detailshttps://www.cvedetails.com/cve/CVE-2022-28172/

◂ PrécédentAperçuSuivant ▸

Want to know what is going to be exploited?

We predict KEV entries!