CVE-2022-45428

The CVE-2022-45428 entry concerns sensitive information leakage in Dahua software. Affected: certain Dahua software products (no specific versions provided). Condition: an attacker with administrator permissions can trigger leakage by sending a crafted packet to a vulnerable interface to obtain d...

CVE-2022-45429

Some Dahua software products have a vulnerability of server-side request forgery SSRF. An Attacker can access internal resources by concatenating links URL that conform to specific rules...

CVE-2022-45433

Some Dahua software products have a vulnerability of unauthenticated traceroute host from remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could get the traceroute results...

CVE-2022-45427

Some Dahua software products have a vulnerability of unrestricted upload of file. After obtaining the permissions of administrators, by sending a specific crafted packet to the vulnerable interface, an attacker can upload arbitrary files...

PT-2022-27509 · Dahua · Dahua

Name of the Vulnerable Software and Affected Versions: Dahua software products affected versions not specified Description: The issue allows for the unrestricted download of files. After gaining ordinary user permissions, an attacker can send a crafted packet to the vulnerable interface to downlo...

CVE-2022-45426

Some Dahua software products have a vulnerability of unrestricted download of file. After obtaining the permissions of ordinary users, by sending a specific crafted packet to the vulnerable interface, an attacker can download arbitrary files...

Dahua software products 信任管理问题漏洞

Dahua software products are a family of applications from Dahua Corporation of China. A security vulnerability exists in a number of Dahua software products that stems from their use of hard-coded encryption keys that allow an attacker to obtain AES encryption keys...

CVE-2022-45431

Some Dahua software products have a vulnerability of unauthenticated restart of remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could unauthenticated restart of remote DSS Server...

Dahua software products 访问控制错误漏洞

Dahua software products are a family of applications from the Chinese company Dahua. A security vulnerability exists in several Dahua software products that stems from their unauthenticated MQTT credential requests that allow an attacker to obtain encrypted MQTT credentials which cannot be direct...

CVE-2022-45423

The CVE-2022-45423 entry concerns Dahua software products vulnerable to unauthenticated requests for MQTT credentials. Affected component is the vulnerable interface handling MQTT credential requests; the underlying issue enables an attacker to obtain encrypted MQTT credentials by sending a craft...

PT-2022-27508 · Dahua · Dahua

Name of the Vulnerable Software and Affected Versions: Dahua software products affected versions not specified Description: The issue is related to the use of a hard-coded cryptographic key in some Dahua software products. An attacker can exploit this to obtain the AES crypto key. Recommendations...

CVE-2022-45434

Some Dahua software products have a vulnerability of unauthenticated un-throttled ICMP requests on remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could exploit the victim server to launch ICMP...

Dahua software products 授权问题漏洞

Dahua software products are a family of applications from Dahua Corporation of China. A security vulnerability exists in several Dahua software products that stems from an unrestricted ICMP request from its remote DSS server that allows an unauthenticated attacker to bypass firewall access contro...

CVE-2022-45424

Some Dahua software products have a vulnerability of unauthenticated request of AES crypto key. An attacker can obtain the AES crypto key by sending a specific crafted packet to the vulnerable interface...

CVE-2022-45427

Some Dahua software products have a vulnerability of unrestricted upload of file. After obtaining the permissions of administrators, by sending a specific crafted packet to the vulnerable interface, an attacker can upload arbitrary files...

PT-2022-6097 · Dahua · Dhi-Dss4004-S2 +4

Name of the Vulnerable Software and Affected Versions: Dahua software products affected versions not specified DSS Professional affected versions not specified DSS Express affected versions not specified DHI-DSS4004-S2 affected versions not specified DHI-DSS7016D-S2 affected versions not specifie...

Dahua software products 授权问题漏洞

Dahua software products are a family of applications from Dahua Corporation of China. A security vulnerability exists in a number of Dahua software products, which can be exploited by an unauthenticated attacker to search for devices within an IP range using a remote DSS server by sending special...

CVE-2022-45431

CVE-2022-45431 affects Dahua software products. The vulnerability allows an attacker to cause an unauthenticated restart of the remote DSS Server by sending a crafted packet after bypassing firewall ACLs. Impact is high on availability; no explicit patch/version remediation is provided in the ava...

CVE-2022-45426

CVE-2022-45426 affects Dahua software products. The vulnerability allows unrestricted download of arbitrary files after an ordinary user gains permissions, by sending a specifically crafted packet to the vulnerable interface. Reported impacts include potential exposure of confidential data; explo...

Dahua software products 访问控制错误漏洞

Dahua software products are a family of applications from Dahua Corporation Dahua of China. A security vulnerability exists in several Dahua software products that stems from an unauthenticated request for an AES encryption key that allows an attacker to obtain an AES encryption key by sending a...