XSS Vulnerability in Hikvision Hybrid SAN/Cluster Storage Products
CVE-2022-28172
6.5MEDIUM
What is CVE-2022-28172?
The web module in certain Hikvision Hybrid SAN/Cluster Storage products is susceptible to a security vulnerability due to insufficient input validation. This vulnerability allows attackers to exploit the system via an XSS attack by sending specially crafted messages containing malicious commands to the affected device. As a result, unauthorized access and manipulation of data could occur, potentially leading to severe security breaches.
Affected Version(s)
DS-A71024/48/72R,DS-A80624S,DS-A81016S,DS-A72024/72R,DS-A80316S,DS-A82024D V2.X
DS-A71024/48R-CVS,DS-A72024/48R-CVS V1.X