Some Dahua software products have a vulnerability of unauthenticated restart of remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could unauthenticated restart of remote DSS Server.
References
Link | Resource |
---|---|
https://www.dahuasecurity.com/support/cybersecurity/details/1137 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
Configuration 4 (hide)
AND |
|
Information
Published : 2022-12-27 10:15
Updated : 2023-01-04 20:34
NVD link : CVE-2022-45431
Mitre link : CVE-2022-45431
JSON object : View
CWE
CWE-287
Improper Authentication
Products Affected
dahuasecurity
- dhi-dss4004-s2
- dhi-dss7016dr-s2_firmware
- dhi-dss7016d-s2_firmware
- dhi-dss7016d-s2
- dhi-dss7016dr-s2
- dss_professional
- dhi-dss4004-s2_firmware
- dss_express
linux
- linux_kernel