The vulnerability of the packet handler in the centralized video surveillance equipment management system of Dahua DSS Professional and DSS Express, as well as the DHI-DSS4004-S2/DHI-DSS7016D-S2/DHI-DSS7016DR-S2 video surveillance management servers, allows a intruder to load arbitrary files into the system.

🗓️ 05 Jan 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

Packet handler flaw in Dahua centralized surveillance systems allows remote loading of arbitrary files.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-45427	27 Dec 202220:25	–	circl
CNNVD	Dahua software products 代码问题漏洞	27 Dec 202200:00	–	cnnvd
CVE	CVE-2022-45427	27 Dec 202200:00	–	cve
Cvelist	CVE-2022-45427	27 Dec 202200:00	–	cvelist
EUVD	EUVD-2022-48299	3 Oct 202520:07	–	euvd
NVD	CVE-2022-45427	27 Dec 202218:15	–	nvd
OSV	CVE-2022-45427	27 Dec 202218:15	–	osv
Prion	Unrestricted file upload	27 Dec 202218:15	–	prion
Positive Technologies	PT-2022-6097 · Dahua · Dhi-Dss4004-S2 +4	27 Dec 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-45427	22 May 202521:46	–	redhatcve

Vulners

Node

dahua_technology_co.,dss_professionalMatch7.002.1760000.2

OR

dahua_technology_co.,dss_professionalMatch8.0.2

OR

dahua_technology_co.,dss_professionalMatch8.0.4

OR

dahua_technology_co.,dss_professionalMatch8.1

OR

dahua_technology_co.,dss_professionalMatch8.1.1

OR

dahua_technology_co.,dss_expressMatch1.000.175j000.2

OR

dahua_technology_co.,dss_expressMatch8.0.2

OR

dahua_technology_co.,dss_expressMatch8.0.4

OR

dahua_technology_co.,dss_expressMatch8.1

OR

dahua_technology_co.,dss_expressMatch8.1.1

OR

dahua_technology_co.,dhi-dss7016d-s2Match1.001.0000001.2

OR

dahua_technology_co.,dhi-dss7016d-s2Match8.0.2

OR

dahua_technology_co.,dhi-dss7016d-s2Match8.0.4

OR

dahua_technology_co.,dhi-dss7016d-s2Match8.1

OR

dahua_technology_co.,dhi-dss7016dr-s2Match1.001.0000001.2

OR

dahua_technology_co.,dhi-dss7016dr-s2Match8.0.2

OR

dahua_technology_co.,dhi-dss7016dr-s2Match8.0.4

OR

dahua_technology_co.,dhi-dss7016dr-s2Match8.1

OR

dahua_technology_co.,dhi-dss4004-s2Match1.001.0000000.2

OR

dahua_technology_co.,dhi-dss4004-s2Match8.0.2

OR

dahua_technology_co.,dhi-dss4004-s2Match8.0.4

OR

dahua_technology_co.,dhi-dss4004-s2Match8.1

Source	Link
vuldb	www.vuldb.com/ru/
dahuasecurity	www.dahuasecurity.com/support/cybersecurity/details/1137
web	www.web.nvd.nist.gov/view/vuln/detail

10 Jan 2023 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 28.5

CVSS 38.7

EPSS0.007

dahua surveillance systems centralized management packet handler remote file loading arbitrary files video surveillance servers