CVE-2026-22623

{"id": "CVE-2026-22623", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "hsrc@hikvision.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "published": "2026-01-30T11:15:55.663", "references": [{"url": "https://www.hiksemitech.com/en/hiksemi/support/security-advisory.html", "source": "hsrc@hikvision.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-77"}]}], "descriptions": [{"lang": "en", "value": "Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can execute arbitrary commands on the device by crafting specific messages."}, {"lang": "es", "value": "Debido a la validaci\u00f3n insuficiente de par\u00e1metros de entrada en la interfaz, los usuarios autenticados de ciertos productos NAS de HIKSEMI pueden ejecutar comandos arbitrarios en el dispositivo mediante la creaci\u00f3n de mensajes espec\u00edficos."}], "lastModified": "2026-04-15T00:35:42.020", "sourceIdentifier": "hsrc@hikvision.com"}