← Database

CVE-2022-45425

HIGH CVSS: 7.5 Published: 2022-12-27 Modified: 2026-06-17

Description

Some Dahua software products have a vulnerability of using of hard-coded cryptographic key. An attacker can obtain the AES crypto key by exploiting this vulnerability.

Affected Platforms

Dahuasecurity Dhi-Dss4004-S2 FirmwareDahuasecurity Dss ExpressDahuasecurity Dhi-Dss7016Dr-S2Dahuasecurity Dhi-Dss7016Dr-S2 FirmwareDahuasecurity Dhi-Dss7016D-S2 FirmwareDahuasecurity Dhi-Dss4004-S2Dahuasecurity Dss ProfessionalDahuasecurity Dhi-Dss7016D-S2

Weakness Type

CWE-798, CWE-798

References