Dahua ASI7213X-T1 Authentication Bypass By Capture-Replay (CVE-2022-30563)

When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in through ONVIF, he can log in to the device by replaying the user's login packet. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

PT-2022-3747 · Softing +2 · Softing Secure Integration Server +2

Name of the Vulnerable Software and Affected Versions: Softing Secure Integration Server version V1.22 Dahua ASI7213X-T1 affected versions not specified Description: The issue is related to an uncontrolled search path element that allows an attacker to execute arbitrary code by placing a maliciou...

Dahua ASI7213X-T1 (Update A)

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Dahua Equipment: DHI-ASI7213X-T1 --------- Begin Update A Part 1 of 4 --------- Vulnerabilities: Unrestricted Upload of File with Dangerous Type, Authentication Bypass by Capture-replay, Generation of...