CVE:CVE-2022-28172
CNNVD:CNNVD-202206-2627
Hikvision Hybrid SAN/Cluster Storage Products是中国海康威视（Hikvision）公司的一系列经济可靠的混合 SAN（存储区域网络）产品。
Hikvision Hybrid SAN/Cluster Storage存在安全漏洞，该漏洞源于 web 模块输入验证不足。攻击者利用该漏洞通过发送带有恶意命令的消息来进行跨站脚本攻击。
solution:Upgrade hikvision ds-a71024_firmware to a higher version than 2.3.8-6,1.1.4,and avoid the version (,2.3.8-6],(,1.1.4]; Upgrade hikvision ds-a71048_firmware to a higher version than 2.3.8-6,and avoid the version (,2.3.8-6]; Upgrade hikvision ds-a71072r_firmware to a higher version than 2.3.8-6,and avoid the version (,2.3.8-6]; Upgrade hikvision ds-a80624s_firmware to a higher version than 2.3.8-6,and avoid the version (,2.3.8-6]; Upgrade hikvision ds-a81016s_firmware to a higher version than 2.3.8-6,and avoid the version (,2.3.8-6]; Upgrade hikvision ds-a72024_firmware to a higher version than 2.3.8-6,1.1.4,and avoid the version (,2.3.8-6],(,1.1.4]; Upgrade hikvision ds-a72072r_firmware to a higher version than 2.3.8-6,and avoid the version (,2.3.8-6]; Upgrade hikvision ds-a80316s_firmware to a higher version than 2.3.8-6,and avoid the version (,2.3.8-6]; Upgrade hikvision ds-a82024d_firmware to a higher version than 2.3.8-6,and avoid the version (,2.3.8-6]; Upgrade hikvision ds-a71048r-cvs_firmware to a higher version than 1.1.4,and avoid the version (,1.1.4]; Upgrade hikvision ds-a72048r-cvs_firmware to a higher version than 1.1.4,and avoid the version (,1.1.4]