Vulnerabilities > CVE-2022-45431 - Unspecified vulnerability in Dahuasecurity products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

dahuasecurity

NVD

Published: 2022-12-27

Updated: 2024-11-21

Summary

Some Dahua software products have a vulnerability of unauthenticated restart of remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could unauthenticated restart of remote DSS Server.

Vulnerable Configurations

Part	Description	Count
OS	Dahuasecurity Dahuasecurity DHI Dss7016D S2 Firmware 1.001.0000001.2 Dahuasecurity DHI Dss7016D S2 Firmware 8.0.2 Dahuasecurity DHI Dss7016D S2 Firmware 8.0.4 Dahuasecurity DHI Dss7016D S2 Firmware 8.1 Dahuasecurity DHI Dss7016Dr S2 Firmware 1.001.0000001.2 Dahuasecurity DHI Dss7016Dr S2 Firmware 8.0.2 Dahuasecurity DHI Dss7016Dr S2 Firmware 8.0.4 Dahuasecurity DHI Dss7016Dr S2 Firmware 8.1 Dahuasecurity DHI Dss4004 S2 Firmware 1.001.0000001.2 Dahuasecurity DHI Dss4004 S2 Firmware 8.0.2 Dahuasecurity DHI Dss4004 S2 Firmware 8.0.4 Dahuasecurity DHI Dss4004 S2 Firmware 8.1	12
OS	Linux Linux Linux Kernel -	1
Hardware	Dahuasecurity Dahuasecurity DHI Dss7016D S2 - Dahuasecurity DHI Dss7016Dr S2 - Dahuasecurity DHI Dss4004 S2 -	3
Application	Dahuasecurity Dahuasecurity DSS Express 7.002.1760000.2 Dahuasecurity DSS Express 8.0.2 Dahuasecurity DSS Express 8.0.4 Dahuasecurity DSS Express 8.1 Dahuasecurity DSS Express 8.1.1 Dahuasecurity DSS Professional 7.002.1760000.2 Dahuasecurity DSS Professional 8.0.2 Dahuasecurity DSS Professional 8.0.4 Dahuasecurity DSS Professional 8.1 Dahuasecurity DSS Professional 8.1.1	10

Summary

Vulnerable Configurations

References