Severity Rating: CRITICAL
Software Affected
DS-3WF0AC-2NT Versions below V1.1.0
DS-3WF01C-2N/O Versions below V1.0.4
Overview
A
vulnerability has been reported in Hikvision Wireless Bridge Products,
which could allow an attacker to bypass security restrictions on the
targeted system.
Description
This
vulnerability exists in Hikvision Wireless Bridge Products due to
improper parameter handling by the bridges web management interface. An
attacker could exploit this vulnerability by sending specially crafted
messages to the affected devices.
Successful exploitation of this vulnerability could allow an attacker to bypass security restrictions on the targeted system.
Solution
Upgrade to the latest versions of Hikvision Products as mentioned in the vendor advisory.
Vendor Information
Hikvision
References
CVE Name
CVE-2022-28173
About Cert Advisory
We have created this blog to provide latest security advisory from the india cert for the security vulnerability, threats, attacks and patching required to mitigate any kind of cyber attacks.