Ds 3Wap521 Si
Monthly
Authenticated command execution affects several Hikvision wireless access points (DS-3WAP521-SI, DS-3WAP522-SI, DS-3WAP621E-SI, DS-3WAP622E-SI, DS-3WAP623E-SI, DS-3WAP622G-SI), where insufficient input validation lets an attacker holding valid device credentials send crafted packets carrying malicious commands to achieve arbitrary command execution on the device. The CVSS 3.1 vector (7.2, AV:N/AC:L/PR:H/UI:N) indicates a network-reachable but high-privilege (authenticated) attack with full confidentiality, integrity, and availability impact. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV; the vendor has published a security advisory.
Authenticated command execution affects several Hikvision wireless access points (DS-3WAP521-SI, DS-3WAP522-SI, DS-3WAP621E-SI, DS-3WAP622E-SI, DS-3WAP623E-SI, DS-3WAP622G-SI), where insufficient input validation lets an attacker holding valid device credentials send crafted packets carrying malicious commands to achieve arbitrary command execution on the device. The CVSS 3.1 vector (7.2, AV:N/AC:L/PR:H/UI:N) indicates a network-reachable but high-privilege (authenticated) attack with full confidentiality, integrity, and availability impact. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV; the vendor has published a security advisory.