CVE-2022-45427
HIGH
Published Dec 27, 20223y ago · Modified Jun 17, 20261w ago
7.2 CVSS 3.1
Published Dec 27, 2022 3y ago
Last Modified Jun 17, 2026 1w ago
Description
Some Dahua software products have a vulnerability of unrestricted upload of file. After obtaining the permissions of administrators, by sending a specific crafted packet to the vulnerable interface, an attacker can upload arbitrary files.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Attack Vector Network
Attack Complexity Low
Privileges Required High
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High
Threat Intelligence
No active exploitation signals — not in CISA KEV and no EPSS score yet.
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-434 Unrestricted Upload of File with Dangerous Type Resource Mgmt
Affected Products 25
| Vendor | Product | Version | Range |
|---|---|---|---|
| dahuasecurity | dss_express | 7.002.1760000.2 | any |
| dahuasecurity | dss_express | 8.0.2 | any |
| dahuasecurity | dss_express | 8.0.4 | any |
| dahuasecurity | dss_express | 8.1 | any |
| dahuasecurity | dss_express | 8.1.1 | any |
| dahuasecurity | dss_professional | 7.002.1760000.2 | any |
| dahuasecurity | dss_professional | 8.0.2 | any |
| dahuasecurity | dss_professional | 8.0.4 | any |
| dahuasecurity | dss_professional | 8.1 | any |
| dahuasecurity | dss_professional | 8.1.1 | any |
| dahuasecurity | dhi-dss7016d-s2_firmware | 1.001.0000001.2 | any |
| dahuasecurity | dhi-dss7016d-s2_firmware | 8.0.2 | any |
| dahuasecurity | dhi-dss7016d-s2_firmware | 8.0.4 | any |
| dahuasecurity | dhi-dss7016d-s2_firmware | 8.1 | any |
| dahuasecurity | dhi-dss7016d-s2 | * | any |
| dahuasecurity | dhi-dss7016dr-s2_firmware | 1.001.0000001.2 | any |
| dahuasecurity | dhi-dss7016dr-s2_firmware | 8.0.2 | any |
| dahuasecurity | dhi-dss7016dr-s2_firmware | 8.0.4 | any |
| dahuasecurity | dhi-dss7016dr-s2_firmware | 8.1 | any |
| dahuasecurity | dhi-dss7016dr-s2 | * | any |
| dahuasecurity | dhi-dss4004-s2_firmware | 1.001.0000001.2 | any |
| dahuasecurity | dhi-dss4004-s2_firmware | 8.0.2 | any |
| dahuasecurity | dhi-dss4004-s2_firmware | 8.0.4 | any |
| dahuasecurity | dhi-dss4004-s2_firmware | 8.1 | any |
| dahuasecurity | dhi-dss4004-s2 | * | any |
References 1
- dahuasecurity.com https://www.dahuasecurity.com/support/cybersecurity/details/1137
Remediation
- dahuasecurity.com https://www.dahuasecurity.com/support/cybersecurity/details/1137