CVE-2022-45428
LOW
Published Dec 27, 20223y ago · Modified Jun 17, 20261w ago
2.7 CVSS 3.1
Published Dec 27, 2022 3y ago
Last Modified Jun 17, 2026 1w ago
Description
Some Dahua software products have a vulnerability of sensitive information leakage. After obtaining the permissions of administrators, by sending a specific crafted packet to the vulnerable interface, an attacker can obtain the debugging information.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N Attack Vector Network
Attack Complexity Low
Privileges Required High
User Interaction None
Scope Unchanged
Confidentiality Low
Integrity None
Availability None
Threat Intelligence
No active exploitation signals — not in CISA KEV and no EPSS score yet.
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-201
Affected Products 25
| Vendor | Product | Version | Range |
|---|---|---|---|
| dahuasecurity | dss_express | 7.002.1760000.2 | any |
| dahuasecurity | dss_express | 8.0.2 | any |
| dahuasecurity | dss_express | 8.0.4 | any |
| dahuasecurity | dss_express | 8.1 | any |
| dahuasecurity | dss_express | 8.1.1 | any |
| dahuasecurity | dss_professional | 7.002.1760000.2 | any |
| dahuasecurity | dss_professional | 8.0.2 | any |
| dahuasecurity | dss_professional | 8.0.4 | any |
| dahuasecurity | dss_professional | 8.1 | any |
| dahuasecurity | dss_professional | 8.1.1 | any |
| dahuasecurity | dhi-dss7016d-s2_firmware | 1.001.0000001.2 | any |
| dahuasecurity | dhi-dss7016d-s2_firmware | 8.0.2 | any |
| dahuasecurity | dhi-dss7016d-s2_firmware | 8.0.4 | any |
| dahuasecurity | dhi-dss7016d-s2_firmware | 8.1 | any |
| dahuasecurity | dhi-dss7016d-s2 | * | any |
| dahuasecurity | dhi-dss7016dr-s2_firmware | 1.001.0000001.2 | any |
| dahuasecurity | dhi-dss7016dr-s2_firmware | 8.0.2 | any |
| dahuasecurity | dhi-dss7016dr-s2_firmware | 8.0.4 | any |
| dahuasecurity | dhi-dss7016dr-s2_firmware | 8.1 | any |
| dahuasecurity | dhi-dss7016dr-s2 | * | any |
| dahuasecurity | dhi-dss4004-s2_firmware | 1.001.0000001.2 | any |
| dahuasecurity | dhi-dss4004-s2_firmware | 8.0.2 | any |
| dahuasecurity | dhi-dss4004-s2_firmware | 8.0.4 | any |
| dahuasecurity | dhi-dss4004-s2_firmware | 8.1 | any |
| dahuasecurity | dhi-dss4004-s2 | * | any |
References 1
- dahuasecurity.com https://www.dahuasecurity.com/support/cybersecurity/details/1137
Remediation
- dahuasecurity.com https://www.dahuasecurity.com/support/cybersecurity/details/1137