CVE-2022-45432

MEDIUM
Published Dec 27, 20223y ago · Modified Jun 17, 20261w ago
5.3 CVSS 3.1
Medium
Find Similar
Published Dec 27, 2022 3y ago
Last Modified Jun 17, 2026 1w ago

Description

Some Dahua software products have a vulnerability of unauthenticated search for devices. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could unauthenticated search for devices in range of IPs from remote DSS Server.

CVSS Details

Base Score
5.3
Exploitability
3.9
Impact
1.4
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality Low
Integrity None
Availability None

Threat Intelligence

No active exploitation signals — not in CISA KEV and no EPSS score yet.

Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-306 Missing Authentication for Critical Function Authentication

Affected Products 26

VendorProductVersionRange
dahuasecuritydhi-dss7016d-s2_firmware1.001.0000001.2any
dahuasecuritydhi-dss7016d-s2_firmware8.0.2any
dahuasecuritydhi-dss7016d-s2_firmware8.0.4any
dahuasecuritydhi-dss7016d-s2_firmware8.1any
dahuasecuritydhi-dss7016d-s2*any
dahuasecuritydhi-dss7016dr-s2_firmware1.001.0000001.2any
dahuasecuritydhi-dss7016dr-s2_firmware8.0.2any
dahuasecuritydhi-dss7016dr-s2_firmware8.0.4any
dahuasecuritydhi-dss7016dr-s2_firmware8.1any
dahuasecuritydhi-dss7016dr-s2*any
dahuasecuritydhi-dss4004-s2_firmware1.001.0000001.2any
dahuasecuritydhi-dss4004-s2_firmware8.0.2any
dahuasecuritydhi-dss4004-s2_firmware8.0.4any
dahuasecuritydhi-dss4004-s2_firmware8.1any
dahuasecuritydhi-dss4004-s2*any
dahuasecuritydss_express7.002.1760000.2any
dahuasecuritydss_express8.0.2any
dahuasecuritydss_express8.0.4any
dahuasecuritydss_express8.1any
dahuasecuritydss_express8.1.1any
dahuasecuritydss_professional7.002.1760000.2any
dahuasecuritydss_professional8.0.2any
dahuasecuritydss_professional8.0.4any
dahuasecuritydss_professional8.1any
dahuasecuritydss_professional8.1.1any
microsoftwindows*any

References 1

  • dahuasecurity.com https://www.dahuasecurity.com/support/cybersecurity/details/1137
    PatchVendor Advisory

Remediation

  • dahuasecurity.com https://www.dahuasecurity.com/support/cybersecurity/details/1137
    PatchVendor Advisory