Administrative Interface Vulnerability in Dahua Devices
CVE-2022-30560

7.4HIGH

Key Information:

Vendor

Dahuasecurity

Status
Ipchdbw2xxx Ipchfw2xxx Asi7xxxx
Vendor
CVE Published:
28 June 2022

What is CVE-2022-30560?

This vulnerability allows an attacker with administrative access or one conducting a man-in-the-middle attack to send specially crafted packets to the vulnerable interface of Dahua devices. This can result in unexpected crashes, compromising the functionality and reliability of the affected products. Proper security measures should be implemented to prevent unauthorized access and ensure device integrity.

Affected Version(s)

IPCHDBW2XXX IPCHFW2XXX ASI7XXXX Versions which Build time before April

IPCHDBW2XXX IPCHFW2XXX ASI7XXXX 2022

References

https://www.dahuasecurity.com/support/cybersecurity/detai...
x_refsource_MISC

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.