Ds A72072r Firmware

ds-a72072r_firmware

Vendor: Hikvision • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-28808 1Hikvision 10Ds A71024 Firmware Ds A71048 FirmwareDs A71048r Cvs Firmware+7 more Nov 21, 2024 Apr 11, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the admin permission. The attacker can exploit the vulnerability by sending crafted messages to the affe...Show more Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the admin permission. The attacker can exploit the vulnerability by sending crafted messages to the affected devices.Show less
CVE-2022-28172 1Hikvision 11Ds A71024 Firmware Ds A71048 FirmwareDs A71048r Cvs Firmware+8 more Nov 21, 2024 Jun 27, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to XSS attack by sending me...Show more The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to XSS attack by sending messages with malicious commands to the affected device.Show less
CVE-2022-28171 1Hikvision 11Ds A71024 Firmware Ds A71048 FirmwareDs A71048r Cvs Firmware+8 more Nov 21, 2024 Jun 27, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to execute restricted comma...Show more The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to execute restricted commands by sending messages with malicious commands to the affected device.Show less