PT-2023-7592 · Dahua · Dahua Smart Parking Management

Rceraser · Published 2023-06-06 · Updated 2024-05-17 · CVE-2023-3121

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Medium

Base vector

AV:A/AC:L/Au:S/C:P/I:N/A:C

Name of the Vulnerable Software and Affected Versions Dahua Smart Parking Management versions up to 20230528

Description The issue is related to insufficient checking of incoming requests in the /ipms/imageConvert/image file of the Dahua Smart Parking Management system. This can allow a remote attacker to perform a server-side request forgery (SSRF) attack by manipulating the fileUrl argument. The exploit has been publicly disclosed, and the vendor was contacted but did not respond.

Recommendations For versions up to 20230528, as a temporary workaround, consider restricting access to the /ipms/imageConvert/image file to minimize the risk of exploitation. Avoid using the fileUrl argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

BDU:2023-08652

CVE-2023-3121

Affected Products

Dahua Smart Parking Management

References · 8

• 🔥 https://github.com/RCEraser/cve/blob/main/DaHua..md · Exploit
• 🔥 https://github.com/RCERaser/cve/blob/main/DaHua..md · Exploit
• https://bdu.fstec.ru/vul/2023-08652 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-3121 · Security Note
• https://osv.dev/vulnerability/CVE-2023-3121 · Vendor Advisory
• https://vuldb.com/?ctiid.230800 · Note
• https://vuldb.com/?id.230800 · Note
• https://t.me/cvenotify/51859 · Telegram Post