« Volver al listado

CVE-2026-22626

Estado: AplazadaMedia (4.9)—

Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can cause abnormal device behavior by crafting specific messages.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Hiksemi — NASAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-22626",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-22626",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2026-01-30T12:40:22.043403Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "hsrc@hikvision.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.9,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.2
      }
    ]
  },
  "affected": [
    {
      "source": "hsrc@hikvision.com",
      "affectedData": [
        {
          "vendor": "HIKSEMI",
          "product": "HS-AFS-S1H1",
          "versions": [
            {
              "status": "affected",
              "version": "V5.10.10_Build_251126"
            }
          ]
        }
      ]
    }
  ],
  "published": "2026-01-30T11:15:56.010",
  "references": [
    {
      "url": "https://www.hiksemitech.com/en/hiksemi/support/security-advisory.html",
      "source": "hsrc@hikvision.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-233"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Due to insufficient input parameter validation on the interface, authenticated users of certain HIKSEMI NAS products can cause abnormal device behavior by crafting specific messages."
    },
    {
      "lang": "es",
      "value": "Debido a la validación insuficiente de parámetros de entrada en la interfaz, los usuarios autenticados de ciertos productos NAS de HIKSEMI pueden causar un comportamiento anómalo del dispositivo mediante la elaboración de mensajes específicos."
    }
  ],
  "lastModified": "2026-06-17T10:20:10.977",
  "sourceIdentifier": "hsrc@hikvision.com"
}