medium6.5
CVE-2022-45426
Some Dahua software products have a vulnerability of unrestricted download of file.
Impact
Some Dahua software products have a vulnerability of unrestricted download of file. After obtaining the permissions of ordinary users, by sending a specific crafted packet to the vulnerable interface, an attacker can download arbitrary files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dahuasecurity | Dss Express | Versions 7.002.1760000.2, 8.0.2, 8.0.4, 8.1, 8.1.1 |
| Dahuasecurity | Dss Professional | Versions 7.002.1760000.2, 8.0.2, 8.0.4, 8.1, 8.1.1 |
| Dahuasecurity | Dhi-Dss7016d-S2 Firmware | Versions 1.001.0000001.2, 8.0.2, 8.0.4, 8.1 |
| Dahuasecurity | Dhi-Dss7016dr-S2 Firmware | Versions 1.001.0000001.2, 8.0.2, 8.0.4, 8.1 |
| Dahuasecurity | Dhi-Dss4004-S2 Firmware | Versions 1.001.0000001.2, 8.0.2, 8.0.4, 8.1 |