Skip to main content

Ds A71024 Firmware

3 CVEs product

Monthly

CVE-2023-28808 CRITICAL Act Now

Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the admin permission. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Hikvision Authentication Bypass Ds A71024 Firmware Ds A71048 Firmware Ds A71072R Firmware +7
NVD
CVSS 3.1
9.8
EPSS
0.8%
CVE-2022-28172 MEDIUM This Month

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Hikvision XSS Ds A71024 Firmware Ds A71048 Firmware Ds A71072R Firmware +8
NVD
CVSS 3.1
6.1
EPSS
0.7%
CVE-2022-28171 CRITICAL POC THREAT Act Now

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Hikvision Command Injection Ds A71024 Firmware Ds A71048 Firmware Ds A71072R Firmware +8
NVD Exploit-DB
CVSS 3.1
9.8
EPSS
49.9%
EPSS 1% CVSS 9.8
CRITICAL Act Now

Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the admin permission. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Hikvision Authentication Bypass Ds A71024 Firmware +9
NVD
EPSS 1% CVSS 6.1
MEDIUM This Month

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Hikvision XSS Ds A71024 Firmware +10
NVD
EPSS 50% CVSS 9.8
CRITICAL POC THREAT Act Now

The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Hikvision Command Injection Ds A71024 Firmware +10
NVD Exploit-DB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy