low2.7
CVE-2022-45428
Some Dahua software products have a vulnerability of sensitive information leakage.
Impact
Some Dahua software products have a vulnerability of sensitive information leakage. After obtaining the permissions of administrators, by sending a specific crafted packet to the vulnerable interface, an attacker can obtain the debugging information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dahuasecurity | Dss Express | Versions 7.002.1760000.2, 8.0.2, 8.0.4, 8.1, 8.1.1 |
| Dahuasecurity | Dss Professional | Versions 7.002.1760000.2, 8.0.2, 8.0.4, 8.1, 8.1.1 |
| Dahuasecurity | Dhi-Dss7016d-S2 Firmware | Versions 1.001.0000001.2, 8.0.2, 8.0.4, 8.1 |
| Dahuasecurity | Dhi-Dss7016dr-S2 Firmware | Versions 1.001.0000001.2, 8.0.2, 8.0.4, 8.1 |
| Dahuasecurity | Dhi-Dss4004-S2 Firmware | Versions 1.001.0000001.2, 8.0.2, 8.0.4, 8.1 |