CVE-2022-45431
HIGH
Published Dec 27, 20223y ago · Modified Jun 17, 20261w ago
7.5 CVSS 3.1
Published Dec 27, 2022 3y ago
Last Modified Jun 17, 2026 1w ago
Description
Some Dahua software products have a vulnerability of unauthenticated restart of remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could unauthenticated restart of remote DSS Server.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High
Threat Intelligence
No active exploitation signals — not in CISA KEV and no EPSS score yet.
Exploit & Patch Status
No Known Exploit
Patch Available
Weaknesses 1
CWE-284
Affected Products 26
| Vendor | Product | Version | Range |
|---|---|---|---|
| dahuasecurity | dhi-dss7016d-s2_firmware | 1.001.0000001.2 | any |
| dahuasecurity | dhi-dss7016d-s2_firmware | 8.0.2 | any |
| dahuasecurity | dhi-dss7016d-s2_firmware | 8.0.4 | any |
| dahuasecurity | dhi-dss7016d-s2_firmware | 8.1 | any |
| dahuasecurity | dhi-dss7016d-s2 | * | any |
| dahuasecurity | dhi-dss7016dr-s2_firmware | 1.001.0000001.2 | any |
| dahuasecurity | dhi-dss7016dr-s2_firmware | 8.0.2 | any |
| dahuasecurity | dhi-dss7016dr-s2_firmware | 8.0.4 | any |
| dahuasecurity | dhi-dss7016dr-s2_firmware | 8.1 | any |
| dahuasecurity | dhi-dss7016dr-s2 | * | any |
| dahuasecurity | dhi-dss4004-s2_firmware | 1.001.0000001.2 | any |
| dahuasecurity | dhi-dss4004-s2_firmware | 8.0.2 | any |
| dahuasecurity | dhi-dss4004-s2_firmware | 8.0.4 | any |
| dahuasecurity | dhi-dss4004-s2_firmware | 8.1 | any |
| dahuasecurity | dhi-dss4004-s2 | * | any |
| dahuasecurity | dss_express | 7.002.1760000.2 | any |
| dahuasecurity | dss_express | 8.0.2 | any |
| dahuasecurity | dss_express | 8.0.4 | any |
| dahuasecurity | dss_express | 8.1 | any |
| dahuasecurity | dss_express | 8.1.1 | any |
| dahuasecurity | dss_professional | 7.002.1760000.2 | any |
| dahuasecurity | dss_professional | 8.0.2 | any |
| dahuasecurity | dss_professional | 8.0.4 | any |
| dahuasecurity | dss_professional | 8.1 | any |
| dahuasecurity | dss_professional | 8.1.1 | any |
| linux | linux_kernel | * | any |
References 1
- dahuasecurity.com https://www.dahuasecurity.com/support/cybersecurity/details/1137
Remediation
- dahuasecurity.com https://www.dahuasecurity.com/support/cybersecurity/details/1137