medium4.7
CVE-2022-30562
If the user enables the https function on the device, an attacker can modify the user’s request data packet through a man-in-the-middle attack ,Injection of a …
Impact
If the user enables the https function on the device, an attacker can modify the user’s request data packet through a man-in-the-middle attack ,Injection of a malicious URL in the Host: header of the HTTP Request results in a 302 redirect to an attacker-controlled page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dahuasecurity | Ipc-Hdbw2431e-S-S2 Firmware | before 2022-04 |
| Dahuasecurity | Ipc-Hdbw2831e-S-S2 Firmware | before 2022-04 |
| Dahuasecurity | Ipc-Hdbw2230e-S-S2 Firmware | before 2022-04 |
| Dahuasecurity | Ipc-Hdbw2831r-Zs-S2 Firmware | before 2022-04 |
| Dahuasecurity | Ipc-Hdbw2831r-Zas-S2 Firmware | before 2022-04 |
| Dahuasecurity | Ipc-Hdbw2531r-Zs-S2 Firmware | before 2022-04 |
| Dahuasecurity | Ipc-Hdbw2531r-Zas-S2 Firmware | before 2022-04 |
| Dahuasecurity | Ipc-Hdbw2531e-S-S2 Firmware | before 2022-04 |
| Dahuasecurity | Ipc-Hdbw2431r-Zs-S2 Firmware | before 2022-04 |
| Dahuasecurity | Ipc-Hdbw2431r-Zas-S2 Firmware | before 2022-04 |
| Dahuasecurity | Ipc-Hdbw2231f-As-S2 Firmware | before 2022-04 |
| Dahuasecurity | Ipc-Hdbw2231e-S-S2 Firmware | before 2022-04 |