← Database

CVE-2022-45429

HIGH CVSS: 7.5 Published: 2022-12-27 Modified: 2026-06-17

Description

Some Dahua software products have a vulnerability of server-side request forgery (SSRF). An Attacker can access internal resources by concatenating links (URL) that conform to specific rules.

Affected Platforms

Dahuasecurity Dhi-Dss4004-S2 FirmwareDahuasecurity Dss ExpressDahuasecurity Dhi-Dss7016Dr-S2Dahuasecurity Dhi-Dss7016Dr-S2 FirmwareDahuasecurity Dhi-Dss7016D-S2 FirmwareDahuasecurity Dhi-Dss4004-S2Dahuasecurity Dss ProfessionalDahuasecurity Dhi-Dss7016D-S2

Weakness Type

CWE-918, CWE-918

References