VYPR
← All advisories
Medium severity5.9NVD Advisory· Published Dec 27, 2022· Updated Jun 17, 2026

CVE-2022-45434

CVE-2022-45434

Description

Some Dahua software products have a vulnerability of unauthenticated un-throttled ICMP requests on remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could exploit the victim server to launch ICMP request attack to the designated target host.

Affected products

24
  • Dahua/software productsdescription
  • Dahua/DSS Serverllm-fuzzy
  • Dahuasecurity/Dhi Dss7016d S2 Firmware4 versions
    cpe:2.3:o:dahuasecurity:dhi-dss7016d-s2_firmware:1.001.0000001.2:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:dahuasecurity:dhi-dss7016d-s2_firmware:1.001.0000001.2:*:*:*:*:*:*:*
    • cpe:2.3:o:dahuasecurity:dhi-dss7016d-s2_firmware:8.0.2:*:*:*:*:*:*:*
    • cpe:2.3:o:dahuasecurity:dhi-dss7016d-s2_firmware:8.0.4:*:*:*:*:*:*:*
    • cpe:2.3:o:dahuasecurity:dhi-dss7016d-s2_firmware:8.1:*:*:*:*:*:*:*
  • Dahuasecurity/Dhi Dss7016dr S2 Firmware4 versions
    cpe:2.3:o:dahuasecurity:dhi-dss7016dr-s2_firmware:1.001.0000001.2:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:dahuasecurity:dhi-dss7016dr-s2_firmware:1.001.0000001.2:*:*:*:*:*:*:*
    • cpe:2.3:o:dahuasecurity:dhi-dss7016dr-s2_firmware:8.0.2:*:*:*:*:*:*:*
    • cpe:2.3:o:dahuasecurity:dhi-dss7016dr-s2_firmware:8.0.4:*:*:*:*:*:*:*
    • cpe:2.3:o:dahuasecurity:dhi-dss7016dr-s2_firmware:8.1:*:*:*:*:*:*:*
  • Dahuasecurity/Dhi Dss4004 S2 Firmware4 versions
    cpe:2.3:o:dahuasecurity:dhi-dss4004-s2_firmware:1.001.0000001.2:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:dahuasecurity:dhi-dss4004-s2_firmware:1.001.0000001.2:*:*:*:*:*:*:*
    • cpe:2.3:o:dahuasecurity:dhi-dss4004-s2_firmware:8.0.2:*:*:*:*:*:*:*
    • cpe:2.3:o:dahuasecurity:dhi-dss4004-s2_firmware:8.0.4:*:*:*:*:*:*:*
    • cpe:2.3:o:dahuasecurity:dhi-dss4004-s2_firmware:8.1:*:*:*:*:*:*:*
  • Dahuasecurity/Dss Express5 versions
    cpe:2.3:a:dahuasecurity:dss_express:7.002.1760000.2:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:dahuasecurity:dss_express:7.002.1760000.2:*:*:*:*:*:*:*
    • cpe:2.3:a:dahuasecurity:dss_express:8.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:dahuasecurity:dss_express:8.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:dahuasecurity:dss_express:8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:dahuasecurity:dss_express:8.1.1:*:*:*:*:*:*:*
  • Dahuasecurity/Dss Professional5 versions
    cpe:2.3:a:dahuasecurity:dss_professional:7.002.1760000.2:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:dahuasecurity:dss_professional:7.002.1760000.2:*:*:*:*:*:*:*
    • cpe:2.3:a:dahuasecurity:dss_professional:8.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:dahuasecurity:dss_professional:8.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:dahuasecurity:dss_professional:8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:dahuasecurity:dss_professional:8.1.1:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.