low3.7
CVE-2022-45433
Some Dahua software products have a vulnerability of unauthenticated traceroute host from remote DSS Server.
Impact
Some Dahua software products have a vulnerability of unauthenticated traceroute host from remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could get the traceroute results.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dahuasecurity | Dhi-Dss7016d-S2 Firmware | Versions 1.001.0000001.2, 8.0.2, 8.0.4, 8.1 |
| Dahuasecurity | Dhi-Dss7016dr-S2 Firmware | Versions 1.001.0000001.2, 8.0.2, 8.0.4, 8.1 |
| Dahuasecurity | Dhi-Dss4004-S2 Firmware | Versions 1.001.0000001.2, 8.0.2, 8.0.4, 8.1 |
| Dahuasecurity | Dss Express | Versions 7.002.1760000.2, 8.0.2, 8.0.4, 8.1, 8.1.1 |
| Dahuasecurity | Dss Professional | Versions 7.002.1760000.2, 8.0.2, 8.0.4, 8.1, 8.1.1 |