VYPR
← All advisories
High severity7.2NVD Advisory· Published Dec 27, 2022· Updated Jun 17, 2026

CVE-2022-45427

CVE-2022-45427

Description

Some Dahua software products have a vulnerability of unrestricted upload of file. After obtaining the permissions of administrators, by sending a specific crafted packet to the vulnerable interface, an attacker can upload arbitrary files.

Affected products

24
  • Dahua/software productsdescription
  • Dahua/software productsllm-create
  • Dahuasecurity/Dss Express5 versions
    cpe:2.3:a:dahuasecurity:dss_express:7.002.1760000.2:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:dahuasecurity:dss_express:7.002.1760000.2:*:*:*:*:*:*:*
    • cpe:2.3:a:dahuasecurity:dss_express:8.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:dahuasecurity:dss_express:8.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:dahuasecurity:dss_express:8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:dahuasecurity:dss_express:8.1.1:*:*:*:*:*:*:*
  • Dahuasecurity/Dss Professional5 versions
    cpe:2.3:a:dahuasecurity:dss_professional:7.002.1760000.2:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:dahuasecurity:dss_professional:7.002.1760000.2:*:*:*:*:*:*:*
    • cpe:2.3:a:dahuasecurity:dss_professional:8.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:dahuasecurity:dss_professional:8.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:dahuasecurity:dss_professional:8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:dahuasecurity:dss_professional:8.1.1:*:*:*:*:*:*:*
  • Dahuasecurity/Dhi Dss7016d S2 Firmware4 versions
    cpe:2.3:o:dahuasecurity:dhi-dss7016d-s2_firmware:1.001.0000001.2:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:dahuasecurity:dhi-dss7016d-s2_firmware:1.001.0000001.2:*:*:*:*:*:*:*
    • cpe:2.3:o:dahuasecurity:dhi-dss7016d-s2_firmware:8.0.2:*:*:*:*:*:*:*
    • cpe:2.3:o:dahuasecurity:dhi-dss7016d-s2_firmware:8.0.4:*:*:*:*:*:*:*
    • cpe:2.3:o:dahuasecurity:dhi-dss7016d-s2_firmware:8.1:*:*:*:*:*:*:*
  • Dahuasecurity/Dhi Dss7016dr S2 Firmware4 versions
    cpe:2.3:o:dahuasecurity:dhi-dss7016dr-s2_firmware:1.001.0000001.2:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:dahuasecurity:dhi-dss7016dr-s2_firmware:1.001.0000001.2:*:*:*:*:*:*:*
    • cpe:2.3:o:dahuasecurity:dhi-dss7016dr-s2_firmware:8.0.2:*:*:*:*:*:*:*
    • cpe:2.3:o:dahuasecurity:dhi-dss7016dr-s2_firmware:8.0.4:*:*:*:*:*:*:*
    • cpe:2.3:o:dahuasecurity:dhi-dss7016dr-s2_firmware:8.1:*:*:*:*:*:*:*
  • Dahuasecurity/Dhi Dss4004 S2 Firmware4 versions
    cpe:2.3:o:dahuasecurity:dhi-dss4004-s2_firmware:1.001.0000001.2:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:dahuasecurity:dhi-dss4004-s2_firmware:1.001.0000001.2:*:*:*:*:*:*:*
    • cpe:2.3:o:dahuasecurity:dhi-dss4004-s2_firmware:8.0.2:*:*:*:*:*:*:*
    • cpe:2.3:o:dahuasecurity:dhi-dss4004-s2_firmware:8.0.4:*:*:*:*:*:*:*
    • cpe:2.3:o:dahuasecurity:dhi-dss4004-s2_firmware:8.1:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.