CVE-2022-28172 in Hybrid SAN

Tóm tắt

Bởi MITRE • 27/06/2022

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to XSS attack by sending messages with malicious commands to the affected device.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• chịu trách nhiệm: Hangzhou Hikvision Digital Technology Co., Ltd.
• Đặt trước: 29/03/2022
• Tiết lộ: 27/06/2022
• Kiểm duyệt: được chấp nhận
• mục: VDB-202841
• CPE: sẵn sàng
• CWE: CWE-79 (Đã xác nhận)
• CVSS: 6.1 (NVD)
• EPSS: 0.00763
• KEV: không
• Các hoạt động: rất thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-28172
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-28172
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-28172/