Thurein Soe

**Name of the Vulnerable Software and Affected Versions** Hikvision Hybrid SAN/Cluster Storage products (affected versions not specified) **Description** The issue is related to insufficient input validation in the web module of certain Hikvision Hybrid SAN/Cluster Storage products. This allows an attacker to execute restricted commands by sending messages with malicious commands to the affected device. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Hikvision Hybrid SAN/Cluster Storage products (affected versions not specified) **Description** The issue is related to insufficient input validation in the web module of certain Hikvision Hybrid SAN/Cluster Storage products. This allows an attacker to exploit the vulnerability, potentially leading to a cross-site scripting (XSS) attack by sending messages with malicious commands to the affected device. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.