CVE-2022-28172 : Vulnerability Insights and Analysis

A security vulnerability has been identified in certain Hikvision Hybrid SAN/Cluster Storage products, allowing for a cross-site scripting (XSS) attack. This CVE was published on June 27, 2022, by Hikvision.

Understanding CVE-2022-28172

This section provides an overview of the CVE-2022-28172 vulnerability and its impact, along with technical details and mitigation strategies.

What is CVE-2022-28172?

The web module in specific Hikvision Hybrid SAN/Cluster Storage products is vulnerable to XSS attacks due to insufficient input validation. Attackers can exploit this vulnerability by sending malicious commands to the affected device, potentially compromising its security.

The Impact of CVE-2022-28172

The impact of this vulnerability is rated as medium severity based on the CVSS v3.1 score of 6.5. It can lead to high confidentiality impact due to unauthorized access to sensitive data.

Technical Details of CVE-2022-28172

Below are further technical insights into the vulnerability:

Vulnerability Description

The vulnerability in the web module of Hikvision Hybrid SAN/Cluster Storage products allows for XSS attacks, endangering the security of the devices.

Affected Systems and Versions

The following Hikvision products are affected by this vulnerability:

DS-A71024/48/72R, DS-A80624S, DS-A81016S, DS-A72024/72R, DS-A80316S, DS-A82024D (Versions up to V2.3.8-6)
DS-A71024/48R-CVS, DS-A72024/48R-CVS (Versions up to V1.1.4)

Exploitation Mechanism

Attackers exploit the XSS vulnerability by sending crafted messages with malicious commands to the targeted devices, potentially gaining unauthorized access.

Mitigation and Prevention

To mitigate the risks associated with CVE-2022-28172, it is essential to take immediate and long-term security measures.

Immediate Steps to Take

Users are advised to implement the provided patch by Hikvision to address the vulnerability and enhance the security of the affected devices.

Long-Term Security Practices

It is recommended to regularly update the firmware of Hikvision products and follow cybersecurity best practices to prevent XSS attacks and other security threats.

Patching and Updates

Hikvision has released a patch to fix the security vulnerability in the affected Hybrid SAN/Cluster Storage products. Users should promptly apply the patch to safeguard their devices against potential exploitation.