Vulnerabilities > Dahuasecurity > IPC Hfw2831T ZAS S2 Firmware > High
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2022-06-28 | CVE-2022-30560 | Unspecified vulnerability in Dahuasecurity products When an attacker obtaining the administrative account and password, or through a man-in-the-middle attack, the attacker could send a specified crafted packet to the vulnerable interface then lead the device to crash. | 7.4 |
2022-06-28 | CVE-2022-30563 | Unspecified vulnerability in Dahuasecurity products When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in through ONVIF, he can log in to the device by replaying the user's login packet. | 7.4 |