← Database

CVE-2022-45434

MEDIUM CVSS: 5.9 Published: 2022-12-27 Modified: 2026-06-17

Description

Some Dahua software products have a vulnerability of unauthenticated un-throttled ICMP requests on remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could exploit the victim server to launch ICMP request attack to the designated target host.

Affected Platforms

Microsoft WindowsDahuasecurity Dhi-Dss4004-S2 FirmwareDahuasecurity Dss ExpressDahuasecurity Dhi-Dss7016Dr-S2Dahuasecurity Dhi-Dss7016Dr-S2 FirmwareDahuasecurity Dhi-Dss7016D-S2 FirmwareDahuasecurity Dhi-Dss4004-S2Dahuasecurity Dss ProfessionalDahuasecurity Dhi-Dss7016D-S2

Weakness Type

NVD-CWE-noinfo, CWE-770

References