Vulnerabilities > CVE-2022-45430 - Unspecified vulnerability in Dahuasecurity products

CVSS 3.7 - LOW

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

NONE

network

high complexity

dahuasecurity

NVD

Published: 2022-12-27

Updated: 2024-11-21

Summary

Some Dahua software products have a vulnerability of unauthenticated enable or disable SSHD service. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could enable or disable the SSHD service.

Vulnerable Configurations

Part	Description	Count
Application	Dahuasecurity Dahuasecurity DSS Express 7.002.1760000.2 Dahuasecurity DSS Express 8.0.2 Dahuasecurity DSS Express 8.0.4 Dahuasecurity DSS Express 8.1 Dahuasecurity DSS Express 8.1.1 Dahuasecurity DSS Professional 7.002.1760000.2 Dahuasecurity DSS Professional 8.0.2 Dahuasecurity DSS Professional 8.0.4 Dahuasecurity DSS Professional 8.1 Dahuasecurity DSS Professional 8.1.1	10
OS	Linux Linux Linux Kernel -	1
OS	Dahuasecurity Dahuasecurity DHI Dss7016D S2 Firmware 1.001.0000001.2 Dahuasecurity DHI Dss7016D S2 Firmware 8.0.2 Dahuasecurity DHI Dss7016D S2 Firmware 8.0.4 Dahuasecurity DHI Dss7016D S2 Firmware 8.1 Dahuasecurity DHI Dss7016Dr S2 Firmware 1.001.0000001.2 Dahuasecurity DHI Dss7016Dr S2 Firmware 8.0.2 Dahuasecurity DHI Dss7016Dr S2 Firmware 8.0.4 Dahuasecurity DHI Dss7016Dr S2 Firmware 8.1 Dahuasecurity DHI Dss4004 S2 Firmware 1.001.0000001.2 Dahuasecurity DHI Dss4004 S2 Firmware 8.0.2 Dahuasecurity DHI Dss4004 S2 Firmware 8.0.4 Dahuasecurity DHI Dss4004 S2 Firmware 8.1	12
Hardware	Dahuasecurity Dahuasecurity DHI Dss7016D S2 - Dahuasecurity DHI Dss7016Dr S2 - Dahuasecurity DHI Dss4004 S2 -	3

Summary

Vulnerable Configurations

References