← Database

CVE-2022-45432

MEDIUM CVSS: 5.3 Published: 2022-12-27 Modified: 2026-06-17

Description

Some Dahua software products have a vulnerability of unauthenticated search for devices. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could unauthenticated search for devices in range of IPs from remote DSS Server.

Affected Platforms

Microsoft WindowsDahuasecurity Dhi-Dss4004-S2 FirmwareDahuasecurity Dss ExpressDahuasecurity Dhi-Dss7016Dr-S2Dahuasecurity Dhi-Dss7016Dr-S2 FirmwareDahuasecurity Dhi-Dss7016D-S2 FirmwareDahuasecurity Dhi-Dss4004-S2Dahuasecurity Dss ProfessionalDahuasecurity Dhi-Dss7016D-S2

Weakness Type

NVD-CWE-noinfo, CWE-306

References