CVE-2022-28171 — AI Deep Analysis Summary

Q: Root Cause? (CWE/Flaw)

🛡️ **Root Cause**: **CWE-78** (OS Command Injection). 🔍 **Flaw**: The web module fails to properly validate user inputs, allowing malicious commands to be injected and executed by the system.

Q: Who is affected? (Versions/Components)

🏢 **Affected Vendor**: Hikvision (China). 📦 **Products**: Hybrid SAN/Cluster Storage models including **DS-A71024/48/72R**, **DS-A80624S**, **DS-A81016S**, **DS-A72024/72R**, **DS-A80316S**, and **DS-A82024D**.

Q: Is exploitation threshold high? (Auth/Config)

⚡ **Exploitation Threshold**: **LOW**. 📊 **CVSS**: 3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. 🚫 **No Auth Required**: Privileges Required (PR) is **N** (None). Network Accessible (AV:N). Low Complexity (AC:L).

Q: Is there a public Exp? (PoC/Wild Exploitation)

💣 **Public Exploits**: **YES**. 🔗 Multiple PoCs available on GitHub (e.g., by NyaMeeEain, Bibury1337, Sapphire2017) and ExploitDB. Wild exploitation is possible given the low barrier.

Q: How to self-check? (Features/Scanning)

🔍 **Self-Check**: Scan for the specific **DS-Axxxxx** model numbers. 🌐 Check if the web management interface is exposed to the network. ⚠️ Look for unauthenticated access to the vulnerable web endpoints.

Q: Is it fixed officially? (Patch/Mitigation)

🩹 **Official Fix**: **YES**. 📄 Hikvision released a security advisory (Reference: hikvision.com/en/support/cybersecurity...). Users should check for firmware updates for the affected models.

Updated May 08, 2026 CVSS 7.5 · High

This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login. Read the full analysis →

Q1What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: Hikvision Hybrid SAN/Cluster Storage suffers from **Command Injection** via the web module.…

Read full answer (login)

Q2Root Cause? (CWE/Flaw)

🛡️ **Root Cause**: **CWE-78** (OS Command Injection). <br>🔍 **Flaw**: The web module fails to properly validate user inputs, allowing malicious commands to be injected and executed by the system.

Q3Who is affected? (Versions/Components)

🏢 **Affected Vendor**: Hikvision (China). <br>📦 **Products**: Hybrid SAN/Cluster Storage models including **DS-A71024/48/72R**, **DS-A80624S**, **DS-A81016S**, **DS-A72024/72R**, **DS-A80316S**, and **DS-A82024D**.

Q4What can hackers do? (Privileges/Data)

💻 **Attacker Capabilities**: Can execute **Remote Code Execution (RCE)**.…

Read full answer (login)

Q5Is exploitation threshold high? (Auth/Config)

⚡ **Exploitation Threshold**: **LOW**. <br>📊 **CVSS**: 3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. <br>🚫 **No Auth Required**: Privileges Required (PR) is **N** (None). Network Accessible (AV:N). Low Complexity (AC:L).

Q6Is there a public Exp? (PoC/Wild Exploitation)

💣 **Public Exploits**: **YES**. <br>🔗 Multiple PoCs available on GitHub (e.g., by NyaMeeEain, Bibury1337, Sapphire2017) and ExploitDB. Wild exploitation is possible given the low barrier.

Q7How to self-check? (Features/Scanning)

🔍 **Self-Check**: Scan for the specific **DS-Axxxxx** model numbers. <br>🌐 Check if the web management interface is exposed to the network. <br>⚠️ Look for unauthenticated access to the vulnerable web endpoints.

Q8Is it fixed officially? (Patch/Mitigation)

🩹 **Official Fix**: **YES**. <br>📄 Hikvision released a security advisory (Reference: hikvision.com/en/support/cybersecurity...). Users should check for firmware updates for the affected models.

Q9What if no patch? (Workaround)

🛑 **No Patch Workaround**: <br>1. **Block Access**: Restrict network access to the web management interface (Firewall rules). <br>2. **Isolate**: Move devices to a secure, isolated VLAN. <br>3.…

Read full answer (login)

Q10Is it urgent? (Priority Suggestion)

🔥 **Urgency**: **HIGH**. <br>⏳ **Priority**: Immediate action required. <br>📉 **Reason**: Critical severity (High Confidentiality), no authentication needed, and public PoCs exist.…

Read full answer (login)

Continue exploring

Vulnerability detail Full AI analysis (login) hikvision CWE-78