Hikvision Alert
3074Warning Date
Severity Level
Warning Number
Target Sector
10 April, 2023
● Critical
2023-5533
All
Hikvision has released security update to address a vulnerability in the following products:
- Hybrid SAN/Cluster Storage
- DS-A71024/48/72R Versions below V2.3.8-8 (including V2.3.8-8)
- DS-A80624S Versions below V2.3.8-8 (including V2.3.8-8)
- DS-A81016S Versions below V2.3.8-8 (including V2.3.8-8)
- DS-A72024/72R Versions below V2.3.8-8 (including V2.3.8-8)
- DS-A80316S Versions below V2.3.8-8 (including V2.3.8-8)
- DS-A82024D Versions below V2.3.8-8 (including V2.3.8-8)
- DS-A71024/48R-CVS Versions below V1.1.4 (including V1.1.4)
An attacker could exploit this vulnerability by doing the following:
- Improper Access Control
The CERT team encourages users to review Hikvision security advisory and apply the necessary updates: