7.5
Élevée
CVE-2022-45423 Some Dahua software products have a vulnerability of unauthenticated request of MQTT credentials
Description
Some Dahua software products have a vulnerability of unauthenticated request of MQTT credentials. An attacker can obtain encrypted MQTT credentials by sending a specific crafted packet to the vulnerable interface (the credentials cannot be directly exploited).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| DSS Professional, DSS Express, DHI-DSS7016D-S2/DHI-DSS7016DR-S2, DHI-DSS4004-S2 | Versions non publiées |
Références
- www.dahuasecurity.com www.dahuasecurity.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de DSS Professional, DSS Express, DHI-DSS7016D-S2/DHI-DSS7016DR-S2, DHI-DSS4004-S2
Les 10 CVE de DSS Professional, DSS Express, DHI-DSS7016D-S2/DHI-DSS7016DR-S2, DHI-DSS4004-S2 →
CVE-2022-45424
Some Dahua software products have a vulnerability of unauthenticated request of AES crypto key
5.3
Moyenne
CVE-2022-45425
Some Dahua software products have a vulnerability of using of hard-coded cryptographic key
7.5
Élevée
CVE-2022-45433
Some Dahua software products have a vulnerability of unauthenticated traceroute host from remote DSS Server
3.7
Faible
CVE-2022-45426
Some Dahua software products have a vulnerability of unrestricted download of file
6.5
Moyenne