VYPR
← All advisories
Low severity3.7NVD Advisory· Published Dec 27, 2022· Updated Jun 17, 2026

CVE-2022-45433

CVE-2022-45433

Description

Some Dahua software products have a vulnerability of unauthenticated traceroute host from remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could get the traceroute results.

Affected products

23
  • Dahuasecurity/Dss Express5 versions
    cpe:2.3:a:dahuasecurity:dss_express:7.002.1760000.2:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:dahuasecurity:dss_express:7.002.1760000.2:*:*:*:*:*:*:*
    • cpe:2.3:a:dahuasecurity:dss_express:8.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:dahuasecurity:dss_express:8.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:dahuasecurity:dss_express:8.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:dahuasecurity:dss_express:8.1:*:*:*:*:*:*:*
  • Dahuasecurity/Dss Professional5 versions
    cpe:2.3:a:dahuasecurity:dss_professional:7.002.1760000.2:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:dahuasecurity:dss_professional:7.002.1760000.2:*:*:*:*:*:*:*
    • cpe:2.3:a:dahuasecurity:dss_professional:8.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:dahuasecurity:dss_professional:8.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:dahuasecurity:dss_professional:8.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:dahuasecurity:dss_professional:8.1:*:*:*:*:*:*:*
  • Dahuasecurity/Dhi Dss4004 S2 Firmware4 versions
    cpe:2.3:o:dahuasecurity:dhi-dss4004-s2_firmware:1.001.0000001.2:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:dahuasecurity:dhi-dss4004-s2_firmware:1.001.0000001.2:*:*:*:*:*:*:*
    • cpe:2.3:o:dahuasecurity:dhi-dss4004-s2_firmware:8.0.2:*:*:*:*:*:*:*
    • cpe:2.3:o:dahuasecurity:dhi-dss4004-s2_firmware:8.0.4:*:*:*:*:*:*:*
    • cpe:2.3:o:dahuasecurity:dhi-dss4004-s2_firmware:8.1:*:*:*:*:*:*:*
  • Dahuasecurity/Dhi Dss7016d S2 Firmware4 versions
    cpe:2.3:o:dahuasecurity:dhi-dss7016d-s2_firmware:1.001.0000001.2:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:dahuasecurity:dhi-dss7016d-s2_firmware:1.001.0000001.2:*:*:*:*:*:*:*
    • cpe:2.3:o:dahuasecurity:dhi-dss7016d-s2_firmware:8.0.2:*:*:*:*:*:*:*
    • cpe:2.3:o:dahuasecurity:dhi-dss7016d-s2_firmware:8.0.4:*:*:*:*:*:*:*
    • cpe:2.3:o:dahuasecurity:dhi-dss7016d-s2_firmware:8.1:*:*:*:*:*:*:*
  • Dahuasecurity/Dhi Dss7016dr S2 Firmware4 versions
    cpe:2.3:o:dahuasecurity:dhi-dss7016dr-s2_firmware:1.001.0000001.2:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:dahuasecurity:dhi-dss7016dr-s2_firmware:1.001.0000001.2:*:*:*:*:*:*:*
    • cpe:2.3:o:dahuasecurity:dhi-dss7016dr-s2_firmware:8.0.2:*:*:*:*:*:*:*
    • cpe:2.3:o:dahuasecurity:dhi-dss7016dr-s2_firmware:8.0.4:*:*:*:*:*:*:*
    • cpe:2.3:o:dahuasecurity:dhi-dss7016dr-s2_firmware:8.1:*:*:*:*:*:*:*
  • Dahua/software productsdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.