CVE-2022-45424

Опубликовано: 27 дек. 2022

Источник: nvd

CVSS3: 5.3

EPSS Низкий

Описание

Some Dahua software products have a vulnerability of unauthenticated request of AES crypto key. An attacker can obtain the AES crypto key by sending a specific crafted packet to the vulnerable interface.

Ссылки

https://www.dahuasecurity.com/support/cybersecurity/details/1137
Patch
Vendor Advisory
https://www.dahuasecurity.com/support/cybersecurity/details/1137
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:dahuasecurity:dss_express:7.002.1760000.2:*:*:*:*:*:*:*

cpe:2.3:a:dahuasecurity:dss_express:8.0.2:*:*:*:*:*:*:*

cpe:2.3:a:dahuasecurity:dss_express:8.0.4:*:*:*:*:*:*:*

cpe:2.3:a:dahuasecurity:dss_express:8.1:*:*:*:*:*:*:*

cpe:2.3:a:dahuasecurity:dss_express:8.1.1:*:*:*:*:*:*:*

cpe:2.3:a:dahuasecurity:dss_professional:7.002.1760000.2:*:*:*:*:*:*:*

cpe:2.3:a:dahuasecurity:dss_professional:8.0.2:*:*:*:*:*:*:*

cpe:2.3:a:dahuasecurity:dss_professional:8.0.4:*:*:*:*:*:*:*

cpe:2.3:a:dahuasecurity:dss_professional:8.1:*:*:*:*:*:*:*

cpe:2.3:a:dahuasecurity:dss_professional:8.1.1:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

Одно из

cpe:2.3:o:dahuasecurity:dhi-dss7016d-s2_firmware:1.001.0000001.2:*:*:*:*:*:*:*

cpe:2.3:o:dahuasecurity:dhi-dss7016d-s2_firmware:8.0.2:*:*:*:*:*:*:*

cpe:2.3:o:dahuasecurity:dhi-dss7016d-s2_firmware:8.0.4:*:*:*:*:*:*:*

cpe:2.3:o:dahuasecurity:dhi-dss7016d-s2_firmware:8.1:*:*:*:*:*:*:*

cpe:2.3:h:dahuasecurity:dhi-dss7016d-s2:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

Одно из

cpe:2.3:o:dahuasecurity:dhi-dss7016dr-s2_firmware:1.001.0000001.2:*:*:*:*:*:*:*

cpe:2.3:o:dahuasecurity:dhi-dss7016dr-s2_firmware:8.0.2:*:*:*:*:*:*:*

cpe:2.3:o:dahuasecurity:dhi-dss7016dr-s2_firmware:8.0.4:*:*:*:*:*:*:*

cpe:2.3:o:dahuasecurity:dhi-dss7016dr-s2_firmware:8.1:*:*:*:*:*:*:*

cpe:2.3:h:dahuasecurity:dhi-dss7016dr-s2:-:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

Одно из

cpe:2.3:o:dahuasecurity:dhi-dss4004-s2_firmware:1.001.0000001.2:*:*:*:*:*:*:*

cpe:2.3:o:dahuasecurity:dhi-dss4004-s2_firmware:8.0.2:*:*:*:*:*:*:*

cpe:2.3:o:dahuasecurity:dhi-dss4004-s2_firmware:8.0.4:*:*:*:*:*:*:*

cpe:2.3:o:dahuasecurity:dhi-dss4004-s2_firmware:8.1:*:*:*:*:*:*:*

cpe:2.3:h:dahuasecurity:dhi-dss4004-s2:-:*:*:*:*:*:*:*

EPSS

Процентиль: 29%

0.00101

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-306

Связанные уязвимости

GHSA-7jhg-5v84-7gqc

CVSS3: 5.3

github

около 3 лет назад

EPSS

Процентиль: 29%

0.00101

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-306