← Database

CVE-2022-30563

HIGH CVSS: 7.4 Published: 2022-06-28 Modified: 2026-06-17

Description

When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in through ONVIF, he can log in to the device by replaying the user's login packet.

Affected Platforms

Dahuasecurity Ipc-Hfw2239S-Sa-Led-S2Dahuasecurity Ipc-Hfw2239S-Sa-Led-S2 FirmwareDahuasecurity Ipc-Hdbw2831R-Zs-S2 FirmwareDahuasecurity Ipc-Hfw2231M-As-I2-B-S2Dahuasecurity Ipc-Hfw2439M-As-Led-B-S2 FirmwareDahuasecurity Ipc-Hfw2431T-As-S2Dahuasecurity Ipc-Hdbw2231R-Zs-S2 FirmwareDahuasecurity Ipc-Hfw2231M-As-I2-B-S2 FirmwareDahuasecurity Ipc-Hdbw2531R-Zs-S2Dahuasecurity Ipc-Hfw2231T-As-S2

Weakness Type

NVD-CWE-noinfo

References