Dahua Technologies

Records58All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical14CVSS 9.0–10.0

CVSS high25CVSS 7.0–8.9

Exploited now

Dahua Technologies records in CISA KEV

TI-2021-12645 Dahua IP Camera Authentication Bypass Vulnerability CRITICAL 100KEV 2024-08-21 TI-2021-12646 Dahua IP Camera Authentication Bypass Vulnerability CRITICAL 100KEV 2024-08-21

Components

Products in the NVD configurations · select one to filter the records

Dhi-dss4004-s2 Firmware 12 records MEDIUM Dhi-dss7016d-s2 Firmware 12 records MEDIUM Dhi-dss7016dr-s2 Firmware 12 records MEDIUM Dss Express 12 records MEDIUM Dss Professional 12 records MEDIUM Nvr4416-16p-4ks2/i Firmware 8 records MEDIUM Nvr4416-4ks2/i Firmware 8 records MEDIUM Nvr4432-16p-4ks2/i Firmware 8 records MEDIUM

Records

12 records in Dss Professional · all components

TI-2022-22397 CVE-2022-45431 · GHSA-jm5g-mv3f-pjfw

Improper access control in DSS Professional, DSS Express…

MEDIUM 40

Some Dahua software products have a vulnerability of unauthenticated restart of remote DSS Server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00684 Published 2022-12-27 No fix listed CWE-284

TI-2022-22395 CVE-2022-45429 · GHSA-72jg-fgx7-vxp4

Server-side request forgery in DSS Professional, DSS Express…

MEDIUM 40

Some Dahua software products have a vulnerability of server-side request forgery (SSRF).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00566 Published 2022-12-27 No fix listed CWE-918

TI-2022-22391 CVE-2022-45425 · GHSA-7qrc-wm75-hvh3

Hard-coded credentials in DSS Professional, DSS Express…

MEDIUM 40

Some Dahua software products have a vulnerability of using of hard-coded cryptographic key.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00566 Published 2022-12-27 No fix listed CWE-798

TI-2022-22389 CVE-2022-45423 · GHSA-gqwx-q2cx-gx28

Missing authentication in DSS Professional, DSS Express…

MEDIUM 40

Some Dahua software products have a vulnerability of unauthenticated request of MQTT credentials.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0061 Published 2022-12-27 No fix listed CWE-306

TI-2022-22393 CVE-2022-45427 · GHSA-hc4m-x5qf-wgq5

Unrestricted file upload in DSS Professional, DSS Express…

LOW 35

Some Dahua software products have a vulnerability of unrestricted upload of file.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00746 Published 2022-12-27 No fix listed CWE-434

TI-2022-22398 CVE-2022-45432 · GHSA-2pf6-r9w4-v7hm

Missing authentication in DSS Professional、DSS…

LOW 31

Some Dahua software products have a vulnerability of unauthenticated search for devices.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00745 Published 2022-12-27 No fix listed CWE-306

TI-2022-22390 CVE-2022-45424 · GHSA-7jhg-5v84-7gqc

Missing authentication in DSS Professional, DSS Express…

LOW 31

Some Dahua software products have a vulnerability of unauthenticated request of AES crypto key.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00724 Published 2022-12-27 No fix listed CWE-306

TI-2022-22392 CVE-2022-45426 · GHSA-4w2r-846c-v6v2

Some Dahua software products have a vulnerability of unrestricted download of file.

LOW 30

Some Dahua software products have a vulnerability of unrestricted download of file.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00622 Published 2022-12-27 No fix listed CWE-552

TI-2022-22400 CVE-2022-45434 · GHSA-824h-6hr6-ghh3

Resource allocation without limits in DSS Professional, DSS Express…

LOW 28

Some Dahua software products have a vulnerability of unauthenticated un-throttled ICMP requests on remote DSS Server.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00705 Published 2022-12-27 No fix listed CWE-770

TI-2022-22399 CVE-2022-45433 · GHSA-68hv-qf49-hr4m

Missing authentication in DSS Professional, DSS Express…

LOW 19

Some Dahua software products have a vulnerability of unauthenticated traceroute host from remote DSS Server.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00666 Published 2022-12-27 No fix listed CWE-306

TI-2022-22396 CVE-2022-45430 · GHSA-r8rm-jw25-4h55

Improper access control in DSS Professional, DSS Express…

LOW 18

Some Dahua software products have a vulnerability of unauthenticated enable or disable SSHD service.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00441 Published 2022-12-27 No fix listed CWE-284

TI-2022-22394 CVE-2022-45428 · GHSA-4xvh-3f9w-p34q

Some Dahua software products have a vulnerability of sensitive information leakage.

LOW 15

Some Dahua software products have a vulnerability of sensitive information leakage.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00723 Published 2022-12-27 No fix listed CWE-201

Open these records in search →