PT-2022-27516 · Dahua · Dahua

Published 2022-12-27 · Updated 2023-08-08 · CVE-2022-45434

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Dahua software products (affected versions not specified)

Description The issue allows for unauthenticated and un-throttled ICMP requests on a remote DSS Server. An attacker can bypass the firewall access control policy by sending a crafted packet to the vulnerable interface, enabling them to exploit the server and launch an ICMP request attack against a targeted host.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2022-45434

Affected Products

Dahua

References · 6

• https://dahuasecurity.com/support/cybersecurity/details/1137 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-45434 · Security Note
• https://osv.dev/vulnerability/CVE-2022-45434 · Vendor Advisory
• https://t.me/cvenotify/41269 · Telegram Post
• https://t.me/cvenotify/40814 · Telegram Post
• https://t.me/cibsecurity/55430 · Telegram Post