Description
Hikvision Hybrid SAN/Cluster Storage 存在安全漏洞，该漏洞源于 web模块输入验证不足。攻击者利用该漏洞通过发送带有恶意命令的消息来执行受限命令.
Hikvision Hybrid SAN/Cluster Storage 存在安全漏洞（CVE-2022-28171）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2022-28171
https://www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerability-in-some-hikvision-hybrid-san-products/
https://www.sentinelone.com/vulnerability-database/cve-2022-28171/
https://cve.imfht.com/poc_detail/aa4d68510fad3a6d0b9bbfc14e5e1a89b83b58ef?lang=en
https://avd.aquasec.com/nvd/2022/cve-2022-28171/
https://www.exploit-db.com/exploits/51607
https://github.com/NyaMeeEain/CVE-2022-28171-POC
https://avd.aliyun.com/detail?id=AVD-2022-28171
https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2022-28171
https://vulmon.com/vulnerabilitydetails?qid=CVE-2022-28171