CVE-2022-30562

2022-06-2813:43:54

dahua

www.cve.org

cve-2022-30562

man-in-the-middle attack

https function

malicious url injection

AI Score

Confidence

High

EPSS

0.001

Percentile

28.8%

JSON

If the user enables the https function on the device, an attacker can modify the user’s request data packet through a man-in-the-middle attack ,Injection of a malicious URL in the Host: header of the HTTP Request results in a 302 redirect to an attacker-controlled page.

CNA Affected

[
  {
    "product": "IPCHDBW2XXX IPCHFW2XXX ASI7XXXX",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions which Build time before April, 2022"
      }
    ]
  }
]

References

www.dahuasecurity.com/support/cybersecurity/details/1017