Access Control Flaw in Hikvision Wireless Bridge Products
CVE-2022-28173
9.1CRITICAL
What is CVE-2022-28173?
Certain Hikvision wireless bridge products exhibit an access control vulnerability that allows unauthorized users to gain administrative permissions. Attackers can exploit this flaw by sending specially crafted messages to the affected devices, potentially compromising the security of the entire network. It is crucial for users to review their device configurations and apply necessary updates to mitigate this risk.
Affected Version(s)
DS-3WF01C-2N/O V1.0.4
DS-3WF0AC-2NT V1.1.0
References
CVSS V3.1
Score:
9.1
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Souvik Kandar, Arko Dhar
