« Volver al listado

CVE-2026-22624

Estado: AplazadaMedia (4.3)—

Due to inadequate access control, authenticated users of certain HIKSEMI NAS products can manipulate other users' file resources without proper authorization.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Hiksemi — NASAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-22624",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-22624",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-01-30T12:43:48.203961Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "hsrc@hikvision.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "hsrc@hikvision.com",
      "affectedData": [
        {
          "vendor": "HIKSEMI",
          "product": "HS-AFS-S1H1",
          "versions": [
            {
              "status": "affected",
              "version": "V5.10.10_Build_251126"
            }
          ]
        }
      ]
    }
  ],
  "published": "2026-01-30T11:15:55.780",
  "references": [
    {
      "url": "https://www.hiksemitech.com/en/hiksemi/support/security-advisory.html",
      "source": "hsrc@hikvision.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-863"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Due to inadequate access control, authenticated users of certain HIKSEMI NAS products can manipulate other users' file resources without proper authorization."
    },
    {
      "lang": "es",
      "value": "Debido a un control de acceso inadecuado, los usuarios autenticados de ciertos productos NAS de HIKSEMI pueden manipular los recursos de archivo de otros usuarios sin la debida autorización."
    }
  ],
  "lastModified": "2026-06-17T10:20:10.780",
  "sourceIdentifier": "hsrc@hikvision.com"
}