CVE-2022-45426

Опубликовано: 27 дек. 2022

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

Some Dahua software products have a vulnerability of unrestricted download of file. After obtaining the permissions of ordinary users, by sending a specific crafted packet to the vulnerable interface, an attacker can download arbitrary files.

Ссылки

https://www.dahuasecurity.com/support/cybersecurity/details/1137
Patch
Vendor Advisory
https://www.dahuasecurity.com/support/cybersecurity/details/1137
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:dahuasecurity:dss_express:7.002.1760000.2:*:*:*:*:*:*:*

cpe:2.3:a:dahuasecurity:dss_express:8.0.2:*:*:*:*:*:*:*

cpe:2.3:a:dahuasecurity:dss_express:8.0.4:*:*:*:*:*:*:*

cpe:2.3:a:dahuasecurity:dss_express:8.1:*:*:*:*:*:*:*

cpe:2.3:a:dahuasecurity:dss_express:8.1.1:*:*:*:*:*:*:*

cpe:2.3:a:dahuasecurity:dss_professional:7.002.1760000.2:*:*:*:*:*:*:*

cpe:2.3:a:dahuasecurity:dss_professional:8.0.2:*:*:*:*:*:*:*

cpe:2.3:a:dahuasecurity:dss_professional:8.0.4:*:*:*:*:*:*:*

cpe:2.3:a:dahuasecurity:dss_professional:8.1:*:*:*:*:*:*:*

cpe:2.3:a:dahuasecurity:dss_professional:8.1.1:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

Одно из

cpe:2.3:o:dahuasecurity:dhi-dss7016d-s2_firmware:1.001.0000001.2:*:*:*:*:*:*:*

cpe:2.3:o:dahuasecurity:dhi-dss7016d-s2_firmware:8.0.2:*:*:*:*:*:*:*

cpe:2.3:o:dahuasecurity:dhi-dss7016d-s2_firmware:8.0.4:*:*:*:*:*:*:*

cpe:2.3:o:dahuasecurity:dhi-dss7016d-s2_firmware:8.1:*:*:*:*:*:*:*

cpe:2.3:h:dahuasecurity:dhi-dss7016d-s2:-:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

Одно из

cpe:2.3:o:dahuasecurity:dhi-dss7016dr-s2_firmware:1.001.0000001.2:*:*:*:*:*:*:*

cpe:2.3:o:dahuasecurity:dhi-dss7016dr-s2_firmware:8.0.2:*:*:*:*:*:*:*

cpe:2.3:o:dahuasecurity:dhi-dss7016dr-s2_firmware:8.0.4:*:*:*:*:*:*:*

cpe:2.3:o:dahuasecurity:dhi-dss7016dr-s2_firmware:8.1:*:*:*:*:*:*:*

cpe:2.3:h:dahuasecurity:dhi-dss7016dr-s2:-:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

Одно из

cpe:2.3:o:dahuasecurity:dhi-dss4004-s2_firmware:1.001.0000001.2:*:*:*:*:*:*:*

cpe:2.3:o:dahuasecurity:dhi-dss4004-s2_firmware:8.0.2:*:*:*:*:*:*:*

cpe:2.3:o:dahuasecurity:dhi-dss4004-s2_firmware:8.0.4:*:*:*:*:*:*:*

cpe:2.3:o:dahuasecurity:dhi-dss4004-s2_firmware:8.1:*:*:*:*:*:*:*

cpe:2.3:h:dahuasecurity:dhi-dss4004-s2:-:*:*:*:*:*:*:*

EPSS

Процентиль: 28%

0.001

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-552

Связанные уязвимости

GHSA-4w2r-846c-v6v2

CVSS3: 6.5

github

около 3 лет назад

EPSS

Процентиль: 28%

0.001

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-552