medium5.3
CVE-2022-30564
Some Dahua embedded products have a vulnerability of unauthorized modification of the device timestamp.
Impact
Some Dahua embedded products have a vulnerability of unauthorized modification of the device timestamp. By sending a specially crafted packet to the vulnerable interface, an attacker can modify the device system time.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dahuasecurity | Ipc-Hf71242f-Z-X Firmware | before 2.800.0000000.4.r.210708 |
| Dahuasecurity | Ipc-Hf7442f-Z-X Firmware | before 2.800.0000000.4.r.210708 |
| Dahuasecurity | Ipc-Hf7842f-Z-X Firmware | before 2.800.0000000.4.r.210708 |
| Dahuasecurity | Ipc-Hf5241f-Ze Firmware | before 2.840.0000000.18.r.220629 |
| Dahuasecurity | Ipc-Hf5442f-Ze Firmware | before 2.840.0000000.18.r.220629 |
| Dahuasecurity | Ipc-Hf5541f-Ze Firmware | before 2.840.0000000.18.r.220629 |
| Dahuasecurity | Ipc-Hf5842f-Ze Firmware | before 2.840.0000000.18.r.220629 |
| Dahuasecurity | Sd5a225gb-Hnr Firmware | before 2.812.0000032.2.r.220804 |
| Dahuasecurity | Sd5a225gb-Hnr-Sl Firmware | before 2.812.0000032.2.r.220804 |
| Dahuasecurity | Sd5a225xa-Hnr Firmware | before 2.812.0000032.2.r.220804 |
| Dahuasecurity | Sd5a225xa-Hnr-Sl Firmware | before 2.812.0000032.2.r.220804 |
| Dahuasecurity | Sd5a232gb-Hnr Firmware | before 2.812.0000032.2.r.220804 |