{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-01T03:02:38.880","vulnerabilities":[{"cve":{"id":"CVE-2022-28171","sourceIdentifier":"hsrc@hikvision.com","published":"2022-06-27T18:15:09.033","lastModified":"2026-06-17T04:38:06.507","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to execute restricted commands by sending messages with malicious commands to the affected device."},{"lang":"es","value":"El módulo web de algunos productos Hikvision Hybrid SAN/Cluster Storage presenta la siguiente vulnerabilidad de seguridad. Debido a una insuficiente comprobación de entrada, el atacante puede explotar la vulnerabilidad para ejecutar comandos restringidos mediante el envío de mensajes con comandos maliciosos al dispositivo afectado"}],"affected":[{"source":"hsrc@hikvision.com","affectedData":[{"vendor":"hikvision","product":"DS-A71024/48/72R,DS-A80624S,DS-A81016S,DS-A72024/72R,DS-A80316S,DS-A82024D","versions":[{"version":"V2.X","lessThanOrEqual":"V2.3.8-6","versionType":"custom","status":"affected"}]},{"vendor":"hikvision","product":"DS-A71024/48R-CVS,DS-A72024/48R-CVS","versions":[{"version":"V1.X","lessThanOrEqual":"V1.1.4","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"hsrc@hikvision.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"hsrc@hikvision.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-77"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hikvision:ds-a71024_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.8-6","matchCriteriaId":"73F0554E-FAE4-4590-B4F6-9FFDCC8CA5E8"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:hikvision:ds-a71024:-:*:*:*:*:*:*:*","matchCriteriaId":"87F8B1C7-B988-49CF-89D0-09017B4DCEBA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hikvision:ds-a71048_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.8-6","matchCriteriaId":"D680E8E7-0B51-4E57-B93F-777C845F724F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:hikvision:ds-a71048:-:*:*:*:*:*:*:*","matchCriteriaId":"2B0871C6-9FE4-45DE-B2F6-65AD12D91FE2"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hikvision:ds-a71072r_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.8-6","matchCriteriaId":"2A4E818B-8946-487A-AAE6-A90C8BB9AC30"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:hikvision:ds-a71072r:-:*:*:*:*:*:*:*","matchCriteriaId":"BB9EDB1F-99FE-49BE-B41F-8F844FC3A974"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hikvision:ds-a80624s_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.8-6","matchCriteriaId":"465EF456-2FD9-4999-B509-04F5C5118C3C"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:hikvision:ds-a80624s:-:*:*:*:*:*:*:*","matchCriteriaId":"66E737EC-4796-465E-AD67-A267E81FB790"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hikvision:ds-a81016s_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.8-6","matchCriteriaId":"32214804-3AC3-496B-98CC-7DA59BA70700"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:hikvision:ds-a81016s:-:*:*:*:*:*:*:*","matchCriteriaId":"8DE0F6B8-F8E8-474E-BFF4-02687D7C0E55"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hikvision:ds-a72024_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.8-6","matchCriteriaId":"727793B5-2ACF-44FA-A736-64840D592B9D"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:hikvision:ds-a72024:-:*:*:*:*:*:*:*","matchCriteriaId":"E10B92A9-17C9-4529-B41A-89E49715BC30"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hikvision:ds-a72072r_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.8-6","matchCriteriaId":"29C01AB7-D978-4B36-A948-A5F1757874B3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:hikvision:ds-a72072r:-:*:*:*:*:*:*:*","matchCriteriaId":"4BC39D52-7658-4082-AF6C-1FE5CD65B03B"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hikvision:ds-a80316s_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.8-6","matchCriteriaId":"4E770A5A-4922-4529-9CAD-8699BD52D221"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:hikvision:ds-a80316s:-:*:*:*:*:*:*:*","matchCriteriaId":"78FAC011-76C8-4EAB-A8B7-89E5269CAA66"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hikvision:ds-a82024d_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"2.3.8-6","matchCriteriaId":"DA3B5E60-851A-4C68-A8FC-D25574216C96"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:hikvision:ds-a82024d:-:*:*:*:*:*:*:*","matchCriteriaId":"AA2216B1-E331-400F-A708-AA0E49B7C046"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hikvision:ds-a71024_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.4","matchCriteriaId":"FCCEFC5B-58F0-427D-94E9-7EA73DB01FBF"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:hikvision:ds-a71024:-:*:*:*:*:*:*:*","matchCriteriaId":"87F8B1C7-B988-49CF-89D0-09017B4DCEBA"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hikvision:ds-a71048r-cvs_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.4","matchCriteriaId":"2D93B293-5F58-4973-A6E1-09ECFE0E5765"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:hikvision:ds-a71048r-cvs:-:*:*:*:*:*:*:*","matchCriteriaId":"A598604F-924B-4678-B70C-5C961FFB0F17"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hikvision:ds-a72024_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.4","matchCriteriaId":"89B4C8F0-9E69-436B-9895-48524B444539"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:hikvision:ds-a72024:-:*:*:*:*:*:*:*","matchCriteriaId":"E10B92A9-17C9-4529-B41A-89E49715BC30"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:hikvision:ds-a72048r-cvs_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.1.4","matchCriteriaId":"0119D3D1-49BD-4A16-A7ED-C69F22EE48D5"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:hikvision:ds-a72048r-cvs:-:*:*:*:*:*:*:*","matchCriteriaId":"4665C60B-B440-43AD-9047-76BBC1D72D2E"}]}]}],"references":[{"url":"http://packetstormsecurity.com/files/170818/Hikvision-Remote-Code-Execution-XSS-SQL-Injection.html","source":"hsrc@hikvision.com","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/173653/Hikvision-Hybrid-SAN-Ds-a71024-SQL-Injection.html","source":"hsrc@hikvision.com","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-hybrid-san-products/","source":"hsrc@hikvision.com","tags":["Vendor Advisory"]},{"url":"http://packetstormsecurity.com/files/170818/Hikvision-Remote-Code-Execution-XSS-SQL-Injection.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://packetstormsecurity.com/files/173653/Hikvision-Hybrid-SAN-Ds-a71024-SQL-Injection.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-hybrid-san-products/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}