CVE-2022-28173 — hikvision / DS-3WF0AC-2NT

Description (CNA)

The web server of some Hikvision wireless bridge products have an access control vulnerability which can be used to obtain the admin permission. The attacker can exploit the vulnerability by sending crafted messages to the affected devices.

Affected (CNA)

Vendor / product	Versions
hikvision / DS-3WF0AC-2NT	affected V1.1.0 before V1.1.0
hikvision / DS-3WF01C-2N/O	affected V1.0.4 before V1.0.4

CWE

CWE-284

References

https://www.hikvision.com/en/support/cybersecurity/security-advisory/access-control-vulnerability-in-some-hikvision-wireless-bridge-products/

ADP enrichment

CVE

No English description supplied.

https://www.hikvision.com/en/support/cybersecurity/security-advisory/access-control-vulnerability-in-some-hikvision-wireless-bridge-products/

CISA-ADP

No English description supplied.

No references supplied.