← Database
CVE-2022-45424
MEDIUM
CVSS: 5.3
Published: 2022-12-27
Modified: 2026-06-17
Description
Some Dahua software products have a vulnerability of unauthenticated request of AES crypto key. An attacker can obtain the AES crypto key by sending a specific crafted packet to the vulnerable interface.
Affected Platforms
Dahuasecurity Dhi-Dss4004-S2 FirmwareDahuasecurity Dss ExpressDahuasecurity Dhi-Dss7016Dr-S2Dahuasecurity Dhi-Dss7016Dr-S2 FirmwareDahuasecurity Dhi-Dss7016D-S2 FirmwareDahuasecurity Dhi-Dss4004-S2Dahuasecurity Dss ProfessionalDahuasecurity Dhi-Dss7016D-S2
Weakness Type
CWE-306, CWE-306