Vulnerability Description
Some Dahua software products have a vulnerability of unauthenticated restart of remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could unauthenticated restart of remote DSS Server.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dahuasecurity | Dhi-Dss7016D-S2 Firmware | 1.001.0000001.2 |
| Dahuasecurity | Dhi-Dss7016D-S2 | - |
| Dahuasecurity | Dhi-Dss7016Dr-S2 Firmware | 1.001.0000001.2 |
| Dahuasecurity | Dhi-Dss7016Dr-S2 | - |
| Dahuasecurity | Dhi-Dss4004-S2 Firmware | 1.001.0000001.2 |
| Dahuasecurity | Dhi-Dss4004-S2 | - |
| Dahuasecurity | Dss Express | 7.002.1760000.2 |
| Dahuasecurity | Dss Professional | 7.002.1760000.2 |
| Linux | Linux Kernel | - |
Related Weaknesses (CWE)
References
- https://www.dahuasecurity.com/support/cybersecurity/details/1137PatchVendor Advisory
- https://www.dahuasecurity.com/support/cybersecurity/details/1137PatchVendor Advisory
FAQ
What is CVE-2022-45431?
CVE-2022-45431 is a vulnerability with a CVSS score of 7.5 (HIGH). Some Dahua software products have a vulnerability of unauthenticated restart of remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulne...
How severe is CVE-2022-45431?
CVE-2022-45431 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-45431?
Check the references section above for vendor advisories and patch information. Affected products include: Dahuasecurity Dhi-Dss7016D-S2 Firmware, Dahuasecurity Dhi-Dss7016D-S2, Dahuasecurity Dhi-Dss7016Dr-S2 Firmware, Dahuasecurity Dhi-Dss7016Dr-S2, Dahuasecurity Dhi-Dss4004-S2 Firmware.