CVE:CVE-2022-28171
CNNVD:CNNVD-202206-2629
Hikvision Hybrid SAN/Cluster Storage Products是中国海康威视（Hikvision）公司的一系列经济可靠的混合 SAN（存储区域网络）产品。
Hikvision Hybrid SAN/Cluster Storage 存在安全漏洞，该漏洞源于 web 模块输入验证不足。攻击者利用该漏洞通过发送带有恶意命令的消息来执行受限命令。
solution:Upgrade hikvision ds-a71024_firmware to a higher version than 2.3.8-6,1.1.4,and avoid the version (,2.3.8-6],(,1.1.4]; Upgrade hikvision ds-a71048_firmware to a higher version than 2.3.8-6,and avoid the version (,2.3.8-6]; Upgrade hikvision ds-a71072r_firmware to a higher version than 2.3.8-6,and avoid the version (,2.3.8-6]; Upgrade hikvision ds-a80624s_firmware to a higher version than 2.3.8-6,and avoid the version (,2.3.8-6]; Upgrade hikvision ds-a81016s_firmware to a higher version than 2.3.8-6,and avoid the version (,2.3.8-6]; Upgrade hikvision ds-a72024_firmware to a higher version than 2.3.8-6,1.1.4,and avoid the version (,2.3.8-6],(,1.1.4]; Upgrade hikvision ds-a72072r_firmware to a higher version than 2.3.8-6,and avoid the version (,2.3.8-6]; Upgrade hikvision ds-a80316s_firmware to a higher version than 2.3.8-6,and avoid the version (,2.3.8-6]; Upgrade hikvision ds-a82024d_firmware to a higher version than 2.3.8-6,and avoid the version (,2.3.8-6]; Upgrade hikvision ds-a71048r-cvs_firmware to a higher version than 1.1.4,and avoid the version (,1.1.4]; Upgrade hikvision ds-a72048r-cvs_firmware to a higher version than 1.1.4,and avoid the version (,1.1.4]