CVE-2022-45430

Summary: CVE-2022-45430 affects Dahua software products where an unauthenticated attacker can enable or disable the SSHD service by sending a crafted packet to a vulnerable interface after bypassing firewall access controls. What’s affected (per documents): Dahua software products with a vulnerab...

PT-2022-27513 · Dahua · Dahua

Name of the Vulnerable Software and Affected Versions: Dahua software products affected versions not specified Description: The issue allows for an unauthenticated restart of the remote DSS Server. An attacker can bypass the firewall access control policy by sending a specific crafted packet to t...

CVE-2022-45963

CVE-2022-45963 affects H3C Firewall versions <= 3.10 ESS6703. The vulnerability is a privilege bypass in the device’s authentication/authorization path, enabling an attacker with network access to achieve high-impact compromise (C/H/I/A = High) with no user interaction required. CVSS v3.1 base...

CVE-2022-45778

CVE-2022-45778 affects Hillstone Firewall SG-6000 (versions 5.0.4.0 and earlier). The root cause is an Incorrect Access Control in the REPORT module of the Web Application Firewall, enabling an attacker to bypass permissions and access the firewall backend with super administrator privileges. Pub...

All In One WP Security & Firewall Plugin for WordPress < 3.8.3 Multiple SQL Injection

The WordPress All In One WP Security & Firewall Plugin installed on the remote host is affected by multiple SQL Injection. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

CVE-2022-45433

Some Dahua software products have a vulnerability of unauthenticated traceroute host from remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could get the traceroute results...

PT-2022-27642 · Hillstone · Hillstone Firewall Sg-6000

Name of the Vulnerable Software and Affected Versions: Hillstone Firewall SG-6000 versions 5.0.4.0 and earlier Description: The issue is related to incorrect access control, allowing an attacker to bypass permissions and gain super administrator privileges in the background of the firewall. This ...

CVE-2022-45431

Some Dahua software products have a vulnerability of unauthenticated restart of remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could unauthenticated restart of remote DSS Server...

PT-2022-27515 · Dahua · Dahua

Name of the Vulnerable Software and Affected Versions: Dahua software products affected versions not specified Description: The issue allows an attacker to perform an unauthenticated traceroute host from a remote DSS Server. By sending a specific crafted packet to the vulnerable interface, after...

CVE-2022-45434

Some Dahua software products have a vulnerability of unauthenticated un-throttled ICMP requests on remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could exploit the victim server to launch ICMP...

Dahua software products 授权问题漏洞

Dahua software products are a family of applications from Dahua Corporation of China. A security vulnerability exists in several Dahua software products that stems from an unrestricted ICMP request from its remote DSS server that allows an unauthenticated attacker to bypass firewall access contro...

Dahua software products 授权问题漏洞

Dahua software products are a family of applications from Dahua Corporation of China. A security vulnerability exists in a number of Dahua software products, which can be exploited by an unauthenticated attacker to search for devices within an IP range using a remote DSS server by sending special...

Dahua software products 授权问题漏洞

Dahua software products are a family of applications from Dahua Corporation Dahua of China. A security vulnerability exists in a number of Dahua software products, which arises from the ability of an unauthenticated attacker to restart a remote DSS server by sending a specific, carefully crafted...

CVE-2022-45433

Technical details about CVE-2022-45433 are not publicly provided in the connected documents. No explicit affected products, versions, or fixes are disclosed here. Monitor the sources for updates and official advisories.

CVE-2022-45433

Some Dahua software products have a vulnerability of unauthenticated traceroute host from remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could get the traceroute results...

All In One WP Security & Firewall < 5.1.3 - Configuration Leak

The plugin leaked settings of the plugin publicly, including the used email address. PoC Config leak in previous versions: "aiowpsremovewpgeneratormetainfo" filetype:txt https://www.google.com/search?q=%22aiowpsremovewpgeneratormetainfo%22+filetype%3Atxt Search for aiowpsemailaddress...

PT-2022-27516 · Dahua · Dahua

Name of the Vulnerable Software and Affected Versions: Dahua software products affected versions not specified Description: The issue allows for unauthenticated and un-throttled ICMP requests on a remote DSS Server. An attacker can bypass the firewall access control policy by sending a crafted...

PT-2022-27512 · Dahua · Dahua

Name of the Vulnerable Software and Affected Versions: Dahua software products affected versions not specified Description: The issue allows an attacker to enable or disable the SSHD service without authentication. This can be achieved by sending a crafted packet to the vulnerable interface after...

CVE-2022-45963

h3c firewall = 3.10 ESS6703 has a privilege bypass vulnerability...

Dahua software products 授权问题漏洞

Dahua software products are a family of applications from Dahua Corporation of China. A security vulnerability exists in several Dahua software products, which originates from an unauthenticated attacker being able to enable or disable SSHD services by sending specific, carefully crafted packets ...