Man-in-the-Middle Vulnerability in ONVIF Devices by Dahua Technology

CVE-2022-30563

What is CVE-2022-30563?

This vulnerability allows attackers to execute man-in-the-middle attacks on Dahua ONVIF devices. By sniffing request packets, an attacker can capture login credentials and subsequently replay the user's login packet, thus gaining unauthorized access to the device. This poses a significant risk to the security of video surveillance systems and associated data, enabling potential control over the devices and access to sensitive information.

References