CVE:CVE-2023-28808
CNNVD:CNNVD-202304-788
Hikvision Hybrid SAN/Cluster Storage Products是中国海康威视（Hikvision）公司的一系列经济可靠的混合 SAN（存储区域网络）产品。
Hikvision Hybrid SAN/Cluster Storage products 存在安全漏洞，攻击者利用该漏洞可以通过向受影响的设备发送精心制作的消息来获取管理员权限，以下产品和版本受到影响：（DS-A71024/48/72R 、DS-A80624S、DS-A81016S、DS-A72024/72R、DS-A80316S、DS-A82024D）V2.3.8-8及之前版本；DS-A71024/48R-CVS V1.1.4及之前版本。
solution:Upgrade hikvision ds-a71024_firmware to a higher version than 2.3.8-8,1.1.4,and avoid the version (,2.3.8-8],(,1.1.4]; Upgrade hikvision ds-a71048_firmware to a higher version than 2.3.8-8,and avoid the version (,2.3.8-8]; Upgrade hikvision ds-a71072r_firmware to a higher version than 2.3.8-8,and avoid the version (,2.3.8-8]; Upgrade hikvision ds-a80624s_firmware to a higher version than 2.3.8-8,and avoid the version (,2.3.8-8]; Upgrade hikvision ds-a81016s_firmware to a higher version than 2.3.8-8,and avoid the version (,2.3.8-8]; Upgrade hikvision ds-a72024_firmware to a higher version than 2.3.8-8,and avoid the version (,2.3.8-8]; Upgrade hikvision ds-a72072r_firmware to a higher version than -,2.3.8-8,and avoid the version (,2.3.8-8]; Upgrade hikvision ds-a80316s_firmware to a higher version than 2.3.8-8,and avoid the version (,2.3.8-8]; Upgrade hikvision ds-a82024d_firmware to a higher version than 2.3.8-8,and avoid the version (,2.3.8-8]; Upgrade hikvision ds-a71048r-cvs_firmware to a higher version than 1.1.4,and avoid the version (,1.1.4]