Priority LOW 28
Some Dahua software products have a vulnerability of unauthenticated un-throttled ICMP requests on remote DSS Server.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00705 · Published 2022-12-27 · No fix listed CWE-770
Priority LOW 19
Some Dahua software products have a vulnerability of unauthenticated traceroute host from remote DSS Server.
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.00666 · Published 2022-12-27 · No fix listed CWE-306
Priority LOW 31
Some Dahua software products have a vulnerability of unauthenticated search for devices.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00745 · Published 2022-12-27 · No fix listed CWE-306
Priority MEDIUM 40
Some Dahua software products have a vulnerability of unauthenticated restart of remote DSS Server.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00684 · Published 2022-12-27 · No fix listed CWE-284
Priority LOW 18
Some Dahua software products have a vulnerability of unauthenticated enable or disable SSHD service.
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.00441 · Published 2022-12-27 · No fix listed CWE-284
Priority MEDIUM 40
Some Dahua software products have a vulnerability of server-side request forgery (SSRF).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00566 · Published 2022-12-27 · No fix listed CWE-918
Priority LOW 15
Some Dahua software products have a vulnerability of sensitive information leakage.
CVSS 3.1LOW 2.7· Network · High privileges · No interaction · EPSS 0.00723 · Published 2022-12-27 · No fix listed CWE-201
Priority LOW 35
Some Dahua software products have a vulnerability of unrestricted upload of file.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00746 · Published 2022-12-27 · No fix listed CWE-434
Priority LOW 30
Some Dahua software products have a vulnerability of unrestricted download of file.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00622 · Published 2022-12-27 · No fix listed CWE-552
Priority MEDIUM 40
Some Dahua software products have a vulnerability of using of hard-coded cryptographic key.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00566 · Published 2022-12-27 · No fix listed CWE-798
Priority LOW 31
Some Dahua software products have a vulnerability of unauthenticated request of AES crypto key.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00724 · Published 2022-12-27 · No fix listed CWE-306
Priority MEDIUM 40
Some Dahua software products have a vulnerability of unauthenticated request of MQTT credentials.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0061 · Published 2022-12-27 · No fix listed CWE-306
THREATIST.IORead the docs