CVE-2022-28171

Scores

EPSS

0.841high84.1%

0%20%40%60%80%100%

Percentile: 84.1%

CVSS

9.8critical3.x

0246810

CVSS Score: 9.8/10

All CVSS Scores

CVSS 3.x

9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS 2.0

7.5

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to execute restricted commands by sending messages with malicious commands to the affected device.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.

Learn more about Scaner-VS 7

Sources

nvd

CWEs

CWE-78

Exploits

Exploit ID: 51607

Source: exploitdb

URL: https://www.exploit-db.com/exploits/51607

Exploit ID: CVE-2022-28171

Source: github-poc

URL: https://github.com/NyaMeeEain/CVE-2022-28171-POC

Vulnerable Software (13)

Type: Configuration

Vendor: *

Product: ds-a71024_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:hikvision:ds-a71024_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "2.3.8-6",          "vulnerable...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:hikvision:ds-a71024_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "2.3.8-6",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:hikvision:ds-a71024:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: ds-a71024_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:hikvision:ds-a71024_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "1.1.4",          "vulnerable":...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:hikvision:ds-a71024_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "1.1.4",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:hikvision:ds-a71024:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: ds-a71048_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:hikvision:ds-a71048_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "2.3.8-6",          "vulnerable...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:hikvision:ds-a71048_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "2.3.8-6",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:hikvision:ds-a71048:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: ds-a71048r-cvs_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:hikvision:ds-a71048r-cvs_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "1.1.4",          "vulnera...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:hikvision:ds-a71048r-cvs_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "1.1.4",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:hikvision:ds-a71048r-cvs:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: ds-a71072r_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:hikvision:ds-a71072r_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "2.3.8-6",          "vulnerabl...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:hikvision:ds-a71072r_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "2.3.8-6",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:hikvision:ds-a71072r:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: ds-a72024_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:hikvision:ds-a72024_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "2.3.8-6",          "vulnerable...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:hikvision:ds-a72024_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "2.3.8-6",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:hikvision:ds-a72024:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: ds-a72024_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:hikvision:ds-a72024_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "1.1.4",          "vulnerable":...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:hikvision:ds-a72024_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "1.1.4",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:hikvision:ds-a72024:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: ds-a72048r-cvs_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:hikvision:ds-a72048r-cvs_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "1.1.4",          "vulnera...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:hikvision:ds-a72048r-cvs_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "1.1.4",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:hikvision:ds-a72048r-cvs:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: ds-a72072r_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:hikvision:ds-a72072r_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "2.3.8-6",          "vulnerabl...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:hikvision:ds-a72072r_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "2.3.8-6",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:hikvision:ds-a72072r:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: ds-a80316s_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:hikvision:ds-a80316s_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "2.3.8-6",          "vulnerabl...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:hikvision:ds-a80316s_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "2.3.8-6",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:hikvision:ds-a80316s:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: ds-a80624s_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:hikvision:ds-a80624s_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "2.3.8-6",          "vulnerabl...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:hikvision:ds-a80624s_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "2.3.8-6",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:hikvision:ds-a80624s:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: ds-a81016s_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:hikvision:ds-a81016s_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "2.3.8-6",          "vulnerabl...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:hikvision:ds-a81016s_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "2.3.8-6",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:hikvision:ds-a81016s:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

Type: Configuration

Vendor: *

Product: ds-a82024d_firmware

Operating System: * * *

Trait:

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:hikvision:ds-a82024d_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "2.3.8-6",          "vulnerabl...

{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:hikvision:ds-a82024d_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "2.3.8-6",          "vulnerable": true        }      ],      "operator": "OR"    },    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:h:hikvision:ds-a82024d:-:*:*:*:*:*:*:*"        }      ],      "operator": "OR"    }  ],  "operator": "AND"}

Source: nvd

End of list

Russian Vulnerability Scanner Database

CVE-2022-28171

Scores

EPSS

CVSS

All CVSS Scores

Vector Breakdown

CVSS

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality Impact

Integrity Impact

Availability Impact

Vector Breakdown

CVSS

Attack Vector

Attack Complexity

Authentication

Confidentiality Impact

Integrity Impact

Availability Impact

Description

Scaner-VS 7 — a modern vulnerability management solution

Sources

CWEs

Exploits

Vulnerable Software (13)