high7.4
CVE-2022-30563
When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in through ONVIF, he can log in to the device by replaying t…
Impact
When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in through ONVIF, he can log in to the device by replaying the user's login packet.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dahuasecurity | Ipc-Hdbw2431e-S-S2 Firmware | before 2022-04 |
| Dahuasecurity | Ipc-Hdbw2831e-S-S2 Firmware | before 2022-04 |
| Dahuasecurity | Ipc-Hdbw2230e-S-S2 Firmware | before 2022-04 |
| Dahuasecurity | Ipc-Hdbw2831r-Zs-S2 Firmware | before 2022-04 |
| Dahuasecurity | Ipc-Hdbw2831r-Zas-S2 Firmware | before 2022-04 |
| Dahuasecurity | Ipc-Hdbw2531r-Zs-S2 Firmware | before 2022-04 |
| Dahuasecurity | Ipc-Hdbw2531r-Zas-S2 Firmware | before 2022-04 |
| Dahuasecurity | Ipc-Hdbw2531e-S-S2 Firmware | before 2022-04 |
| Dahuasecurity | Ipc-Hdbw2431r-Zs-S2 Firmware | before 2022-04 |
| Dahuasecurity | Ipc-Hdbw2431r-Zas-S2 Firmware | before 2022-04 |
| Dahuasecurity | Ipc-Hdbw2231f-As-S2 Firmware | before 2022-04 |
| Dahuasecurity | Ipc-Hdbw2231e-S-S2 Firmware | before 2022-04 |