Vulnerabilities > CVE-2022-45433 - Unspecified vulnerability in Dahuasecurity products

CVSS 3.7 - LOW

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

network

high complexity

dahuasecurity

NVD

Published: 2022-12-27

Updated: 2023-08-08

Summary

Some Dahua software products have a vulnerability of unauthenticated traceroute host from remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could get the traceroute results.

Vulnerable Configurations

Part	Description	Count
OS	Dahuasecurity Dahuasecurity DHI Dss7016D S2 Firmware 1.001.0000001.2 Dahuasecurity DHI Dss7016D S2 Firmware 8.0.2 Dahuasecurity DHI Dss7016D S2 Firmware 8.0.4 Dahuasecurity DHI Dss7016D S2 Firmware 8.1 Dahuasecurity DHI Dss7016Dr S2 Firmware 1.001.0000001.2 Dahuasecurity DHI Dss7016Dr S2 Firmware 8.0.2 Dahuasecurity DHI Dss7016Dr S2 Firmware 8.0.4 Dahuasecurity DHI Dss7016Dr S2 Firmware 8.1 Dahuasecurity DHI Dss4004 S2 Firmware 1.001.0000001.2 Dahuasecurity DHI Dss4004 S2 Firmware 8.0.2 Dahuasecurity DHI Dss4004 S2 Firmware 8.0.4 Dahuasecurity DHI Dss4004 S2 Firmware 8.1	12
OS	Microsoft Microsoft Windows -	1
Hardware	Dahuasecurity Dahuasecurity DHI Dss7016D S2 - Dahuasecurity DHI Dss7016Dr S2 - Dahuasecurity DHI Dss4004 S2 -	3
Application	Dahuasecurity Dahuasecurity DSS Express 7.002.1760000.2 Dahuasecurity DSS Express 8.0.2 Dahuasecurity DSS Express 8.0.4 Dahuasecurity DSS Express 8.1 Dahuasecurity DSS Express 8.1.1 Dahuasecurity DSS Professional 7.002.1760000.2 Dahuasecurity DSS Professional 8.0.2 Dahuasecurity DSS Professional 8.0.4 Dahuasecurity DSS Professional 8.1 Dahuasecurity DSS Professional 8.1.1	10

References

https://www.dahuasecurity.com/support/cybersecurity/details/1137