Two Hikvision wireless bridge models are affected by CVE-2022-28173 if they run firmware below the versions Hikvision identifies as fixes. The vendor says a network-connected attacker could exploit an access-control flaw in the bridge’s web server to obtain administrator permission. That creates a serious security risk, but the advisory does not establish that an attacker accessed camera footage or that the flaw has been exploited in real incidents.
What CVE-2022-28173 affects
Hikvision’s Security Response Center advisory HSRC-202212-01 describes CVE-2022-28173 as an access-control vulnerability in the web server of certain Hikvision wireless bridge products. The vendor says the attacker needs network access to the device and can send a specially crafted message to obtain admin permission.
Hikvision reported a CVSS v3 base score of 9.1 and a temporal score of 8.2 in its 2022 advisory. These are the vendor’s reported severity scores, not evidence that exploitation is occurring now. The advisory’s specific stated impact is administrative access to an affected bridge; it does not say that camera feeds were viewed or that cameras or entire installations were compromised.
Which Hikvision wireless bridges are affected?
| Model | Versions Hikvision lists as affected | Fix version named in the notice |
|---|---|---|
| DS-3WF0AC-2NT | Versions below V1.1.0 | V1.1.0 |
| DS-3WF01C-2N/O | Versions below V1.0.4 | V1.0.4 |
These are the affected ranges and fixes stated in Hikvision’s HSRC-202212-01 notice. They should not be assumed to be the newest firmware available today in every region or for every hardware revision. Check the exact device and its current regional support listing before installing an update.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstall#1 Best Overall
- 𝐓𝐏-𝐋𝐢𝐧𝐤 𝐎𝐌𝐀𝐃𝐀 𝐄𝐬𝐬𝐞𝐧𝐭𝐢𝐚𝐥 𝐑𝐞𝐦𝐨𝐭𝐞 𝐂𝐥𝐨𝐮𝐝 𝐌𝐚𝐧𝐚𝐠𝐞𝐦𝐞𝐧𝐭 𝐏𝐥𝐚𝐭𝐟𝐨𝐫𝐦: Managable over TP-Link OMADA cloud platform. Enjoy the uniform network management experience everywhere in one system, including CPE, Access Point, Network Switch, Gateway
- 𝐄𝐚𝐬𝐲 𝐒𝐞𝐭 𝐮𝐩 𝐰𝐢𝐭𝐡 𝟐𝐩𝐜𝐬 𝐊𝐈𝐓 𝐏𝐫𝐞-𝐜𝐨𝐧𝐟𝐢𝐠𝐮𝐫𝐞𝐝: Save significant deploying time and effort by auto-pairing and agile LEDs
- 𝐖𝐢𝐅𝐢 𝟓, 𝟖𝟔𝟕𝐌𝐛𝐩𝐬 𝐒𝐩𝐞𝐞𝐝: Up to 867 Mbps on the 5 GHz wireless data transfer rate
- 𝐋𝐨𝐧𝐠 𝐑𝐚𝐧𝐠𝐞 𝐭𝐫𝐚𝐧𝐬𝐦𝐢𝐬𝐬𝐢𝐨𝐧: Utilize 5GHz, Ideal for long-range wireless transmission up to 0.6 mile, 1km
- 𝟯 𝐆𝐢𝐠𝐚𝐛𝐢𝐭 𝗣𝗼𝗿𝘁𝘀:: 3× 1000M ports to provide more possiblity for your flexible connection options
How to check and update your device
- Identify the exact model and firmware. Open the bridge’s management interface and record the model and firmware version shown there. Note any hardware revision or regional variant displayed.
- Compare the version with the advisory. For DS-3WF0AC-2NT, versions below V1.1.0 are listed as affected; for DS-3WF01C-2N/O, versions below V1.0.4 are listed as affected.
- Find the correct official firmware. Use Hikvision’s official support site and confirm that the download matches the precise model, hardware revision, and region. The vendor notice says patches and updates are available from its official website.
- Follow Hikvision’s update instructions. Use the procedure and compatibility guidance for that device. Do not install a firmware file intended for a different model or variant.
- Verify the installed version. After the update, return to the management interface and check that the reported firmware matches the applicable fix or a later compatible release listed by Hikvision.
Does this mean someone can hack CCTV?
The vulnerability can give an attacker administrator permission on an affected wireless bridge, according to Hikvision. That is a meaningful security concern for a device used in a CCTV network, but the notice does not establish that this flaw by itself provides access to camera video. Nor does it report confirmed exploitation, incidents, or a count of affected devices. The title’s CCTV-hacking implication should therefore be understood as a potential security risk, not a claim that camera footage has been accessed.
Reduce network exposure while you check
Hikvision says network access to the device is required, but that does not mean the bridge must be directly exposed to the public internet; network access could be local. Restrict access to the bridge’s management interface to trusted systems and networks while arranging the appropriate update.
Rank #2
- LONG-RANGE WIRELESS BRIDGE FOR MULTIPLE LOCATIONS: AdaLov CPE660 creates a point-to-point WiFi bridge between buildings without running costly Ethernet cable. Designed for farms, barns, shops, garages, warehouses, factories and construction sites, it extends a network across open areas up to 3KM with clear line of sight. Use it to share one internet connection, connect remote CCTV or IP cameras, or bring WiFi to an outbuilding; also compatible with Starlink for flexible rural networking.
- FAST 5.8GHZ CONNECTION UP TO 300MBPS: Built for stable long-distance data transmission, the CPE660 outdoor wireless bridge operates on the 5.8GHz band and supports wireless speeds up to 300Mbps. It is a practical choice for video surveillance, remote internet access and everyday network traffic between separate buildings. The focused 5GHz link helps reduce cable installation needs while providing dependable connectivity for homes, farms, barns, shops, garages, warehouses and job sites.
- DUAL ETHERNET PORTS WITH FLEXIBLE POE POWER OPTIONS: CPE660 provides two 100Mbps Ethernet ports for different deployment needs. One port supports 24V PoE only, while the other supports 24-48V PoE and can be powered from a compatible PoE switch, helping simplify wiring and remote installation. IMPORTANT: Do not connect a PoE switch to the 24V-only PoE LAN port, as higher-voltage PoE can damage or burn out the unit. Always use the correct port and supported voltage before powering the bridge.
- 14DBI HIGH-GAIN DIRECTIONAL ANTENNA: The integrated 14dBi antenna focuses wireless energy toward the paired bridge for stronger point-to-point transmission over long distances. With proper alignment and a clear line of sight, CPE660 is designed to maintain a stable 5.8GHz connection between buildings, making it well suited for farms, barns, warehouses, garages, shops and surveillance locations. Use it as a long-range network extender where trenching cable is difficult, disruptive or expensive.
- EASY PRE-PAIRED WDS PLUG-AND-PLAY SETUP: CPE660 comes pre-programmed in WDS bridge mode to simplify installation, so users can create a point-to-point link without first entering a complex web interface. Mount the two units, connect the included PoE adapters, aim them toward each other and power on to build the wireless bridge. This straightforward design is useful for extending internet to a barn, shop, garage, warehouse, camera pole or remote building with less setup time and fewer steps.
Separately, the Australian Cyber Security Centre advises owners, where possible, to prevent affected devices from being accessed from anywhere on the internet in guidance about CVE-2021-36260, a different Hikvision vulnerability: Australian Cyber Security Centre guidance on CVE-2021-36260. That guidance is general context for reducing exposure; it does not expand the affected-product list for CVE-2022-28173.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Sources and scope
Hikvision Security Response Center advisory HSRC-202212-01, initially released on 2022-12-16, is the source for the CVE description, models, firmware versions, attack prerequisite, impact, and scores above. CERT-In also references the bridge advisory in CIVN-2022-0486. The cited Cyber.gov.au guidance concerns a separate CVE and is included only for its general network-exposure advice.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Quick Recap
Rank #4
- WHY CHOOSE UEEVII? 1. Professional wireless bridge brand, 2. Quality customer service within 24 hours; 3. 2-year warranty replacement and lifetime technical support; 4. sufficient inventory and continuous stock; 5. Low-end, mid-range, and high-end wireless bridges meet Your different needs; 6. Provide the most cost-effective network solution
- PLUG AND PLAY: The CPE450 point to point wireless bridge is pre-configured point-to-point before leaving the factory, you only need to connect other devices to the master bridge and the slave bridge respectively and provide power
- 100MBPS NETWORK SPEED: The transmission speed between 2 ethernet bridges can reach 300Mbps, the outdoor WiFi bridge has two built-in 10/100Mbps RJ45 ports to provide you with a wired speed of up to 100Mbps, just connect an access point/router to the slave bridge and broadcast WiFi Get a wireless network
- EASY TO PAIR: The CPE450 Internet bridge is almost plug-and-play, dial pairing method allows you can easily set the master bridge and the slave bridge through the A-B button, then set the numbers of the 2 wireless bridges to be the same to pair by clicking the "RST" button
- EXTENDED NETWORK WiFi: One Master bridge has to be connected to the master router (that has internet) the second slave bridge has to be connected to the slave WIFI router you want the internet to, extend the network to your neighbor's house, store, barn, or garage through the point-to-point method, saving you money. The network relay function can be realized through 2 pairs of wireless bridges
Rank #3
- Enhanced Dual 1000Mbps Ports: The 2.4G 5.8G Wi-Fi wireless bridge provides reliable connections with dual 100/1000Mbps RJ45 ports, offering data transfer speeds of up to 1000Mbps between P2P POE wireless bridge, perfect for stable WiFi network extension
- All in One Network Expansion Solution: This kit combines dual-band wireless bridge and WR3000K WiFi 6 router in one cost-effective solution, letting you expand networks to barns, shops, or remote areas without pricey cabling
- Effortless Setup, Limitless Connectivity: Say goodbye to complex configurations! Our wireless bridge offers a plug-and-play experience, allowing you to establish a point-to-point connection in seconds. No technical expertise required—simply connect the devices, and you're ready to go. it also supports point-to-multipoint setups, giving you the flexibility to expand your network and connect multiple locations or devices with ease
- For Starlink Signal Extension Specialist： Specifically designed for Starlink V2/V3 compatible kit: connect the master bridge to your router, then boost signals to areas like barns, garages, or rural stores. Maximize for Starlink’s coverage while eliminating costly wired installations
- 5KM Long Range with 14dBi High-Gain Antenna: This high-gain antenna focuses the signal for maximum efficiency, ensuring a strong, stable connection with the outdoor Wi-Fi extender even over vast distances
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
