Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Hikvision Component: Ds-a71024 Firmware Clear all filters
TI-2023-13318 CVE-2023-28808 · GHSA-78m2-q358-37wh

Improper access control in Hikvision…

Priority MEDIUM 50

Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the admin permission.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00825 Published 2023-04-11 No fix listed CWE-284
TI-2022-10970 CVE-2022-28172 · GHSA-5h27-7cmr-gg9r

Cross-site scripting in Hikvision…

Priority LOW 30

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00802 Published 2022-06-27 No fix listed CWE-79
TI-2022-10969 CVE-2022-28171 · GHSA-pj6v-v769-6jfp

OS command injection in Hikvision…

Priority HIGH 74

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.51636 Published 2022-06-27 No fix listed CWE-78