5.3
Medium
CVE-2022-30564 Some Dahua embedded products have a vulnerability of unauthorized modification of the device timestamp
Description
Some Dahua embedded products have a vulnerability of unauthorized modification of the device timestamp. By sending a specially crafted packet to the vulnerable interface, an attacker can modify the device system time.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| IPC-HX5XXX,IPC-HX7XXX,SD5A,SD22,SD59,NVR5XXX-I,NVR5XXX-I/L,NVR4XXX-I,NVR2XXX-I,XVRXXXX-I2,XVRXXXX-X | Versions not published |