Vulnerabilities > Dahuasecurity
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-12-27 | CVE-2022-45423 | Missing Authentication for Critical Function vulnerability in Dahuasecurity products Some Dahua software products have a vulnerability of unauthenticated request of MQTT credentials. | 7.5 |
| 2022-12-27 | CVE-2022-45424 | Missing Authentication for Critical Function vulnerability in Dahuasecurity products Some Dahua software products have a vulnerability of unauthenticated request of AES crypto key. | 5.3 |
| 2022-12-27 | CVE-2022-45425 | Use of Hard-coded Credentials vulnerability in Dahuasecurity products Some Dahua software products have a vulnerability of using of hard-coded cryptographic key. | 7.5 |
| 2022-12-27 | CVE-2022-45426 | Files or Directories Accessible to External Parties vulnerability in Dahuasecurity products Some Dahua software products have a vulnerability of unrestricted download of file. | 6.5 |
| 2022-12-27 | CVE-2022-45427 | Unrestricted Upload of File with Dangerous Type vulnerability in Dahuasecurity products Some Dahua software products have a vulnerability of unrestricted upload of file. | 7.2 |
| 2022-12-27 | CVE-2022-45428 | Unspecified vulnerability in Dahuasecurity products Some Dahua software products have a vulnerability of sensitive information leakage. | 2.7 |
| 2022-12-27 | CVE-2022-45429 | Server-Side Request Forgery (SSRF) vulnerability in Dahuasecurity products Some Dahua software products have a vulnerability of server-side request forgery (SSRF). | 7.5 |
| 2022-12-27 | CVE-2022-45430 | Unspecified vulnerability in Dahuasecurity products Some Dahua software products have a vulnerability of unauthenticated enable or disable SSHD service. | 3.7 |
| 2022-12-27 | CVE-2022-45431 | Unspecified vulnerability in Dahuasecurity products Some Dahua software products have a vulnerability of unauthenticated restart of remote DSS Server. | 7.5 |
| 2022-12-27 | CVE-2022-45432 | Unspecified vulnerability in Dahuasecurity products Some Dahua software products have a vulnerability of unauthenticated search for devices. | 5.3 |