HIGH · 7.4

CVE-2022-30560

When an attacker obtaining the administrative account and password, or through a man-in-the-middle attack, the attacker could send a specified crafted packet to the vulnerable interface then lead the ...

Vulnerability Description

When an attacker obtaining the administrative account and password, or through a man-in-the-middle attack, the attacker could send a specified crafted packet to the vulnerable interface then lead the device to crash.

CVSS Score

7.4

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
DahuasecurityIpc-Hdbw2431E-S-S2 Firmware< 2022-04
DahuasecurityIpc-Hdbw2431E-S-S2-
DahuasecurityIpc-Hdbw2831E-S-S2 Firmware< 2022-04
DahuasecurityIpc-Hdbw2831E-S-S2-
DahuasecurityIpc-Hdbw2230E-S-S2 Firmware< 2022-04
DahuasecurityIpc-Hdbw2230E-S-S2-
DahuasecurityIpc-Hdbw2831R-Zs-S2 Firmware< 2022-04
DahuasecurityIpc-Hdbw2831R-Zs-S2-
DahuasecurityIpc-Hdbw2831R-Zas-S2 Firmware< 2022-04
DahuasecurityIpc-Hdbw2831R-Zas-S2-
DahuasecurityIpc-Hdbw2531R-Zs-S2 Firmware< 2022-04
DahuasecurityIpc-Hdbw2531R-Zs-S2-
DahuasecurityIpc-Hdbw2531R-Zas-S2 Firmware< 2022-04
DahuasecurityIpc-Hdbw2531R-Zas-S2-
DahuasecurityIpc-Hdbw2531E-S-S2 Firmware< 2022-04
DahuasecurityIpc-Hdbw2531E-S-S2-
DahuasecurityIpc-Hdbw2431R-Zs-S2 Firmware< 2022-04
DahuasecurityIpc-Hdbw2431R-Zs-S2-
DahuasecurityIpc-Hdbw2431R-Zas-S2 Firmware< 2022-04
DahuasecurityIpc-Hdbw2431R-Zas-S2-

References

FAQ

What is CVE-2022-30560?

CVE-2022-30560 is a vulnerability with a CVSS score of 7.4 (HIGH). When an attacker obtaining the administrative account and password, or through a man-in-the-middle attack, the attacker could send a specified crafted packet to the vulnerable interface then lead the ...

How severe is CVE-2022-30560?

CVE-2022-30560 has been rated HIGH with a CVSS base score of 7.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-30560?

Check the references section above for vendor advisories and patch information. Affected products include: Dahuasecurity Ipc-Hdbw2431E-S-S2 Firmware, Dahuasecurity Ipc-Hdbw2431E-S-S2, Dahuasecurity Ipc-Hdbw2831E-S-S2 Firmware, Dahuasecurity Ipc-Hdbw2831E-S-S2, Dahuasecurity Ipc-Hdbw2230E-S-S2 Firmware.