Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2022-06-28	CVE-2022-30560	Unspecified vulnerability in Dahuasecurity products When an attacker obtaining the administrative account and password, or through a man-in-the-middle attack, the attacker could send a specified crafted packet to the vulnerable interface then lead the device to crash. network dahuasecurity	5.8
2022-06-28	CVE-2022-30561	Unspecified vulnerability in Dahuasecurity products When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in, the attacker could log in to the device by replaying the user's login packet. network dahuasecurity	4.3
2022-06-28	CVE-2022-30562	Open Redirect vulnerability in Dahuasecurity products If the user enables the https function on the device, an attacker can modify the user’s request data packet through a man-in-the-middle attack ,Injection of a malicious URL in the Host: header of the HTTP Request results in a 302 redirect to an attacker-controlled page. network high complexity dahuasecurity CWE-601	4.0
2022-06-28	CVE-2022-30563	Unspecified vulnerability in Dahuasecurity products When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in through ONVIF, he can log in to the device by replaying the user's login packet. network dahuasecurity	5.8