Approved changes feed: RSS · Atom

cpe:2.3:a:dahuasecurity:dss_express:8.1:*:*:*:*:*:*:*

part: a version: 8.1 update: *

VendorDahuasecurity (49e0e28a-d51a-562c-8056-164d442a6fc2)
ProductDss Express (ac19fce7-684d-5238-9943-9b3dea9f9f79)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-45434 vulnerable 2026-06-08 05:50:36.310485 Details available
Some Dahua software products have a vulnerability of unauthenticated un-throttled ICMP requests on remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could exploit the victim server to launch ICMP request attack to the designated target host.
Published: 2022-12-27T00:00:00.000Z
Updated: 2025-04-14T12:59:11.203Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45433 vulnerable 2026-06-08 05:50:36.308417 Details available
Some Dahua software products have a vulnerability of unauthenticated traceroute host from remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could get the traceroute results.
Published: 2022-12-27T00:00:00.000Z
Updated: 2025-04-14T13:05:43.020Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45432 vulnerable 2026-06-08 05:50:36.305857 Details available
Some Dahua software products have a vulnerability of unauthenticated search for devices. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could unauthenticated search for devices in range of IPs from remote DSS Server.
Published: 2022-12-27T00:00:00.000Z
Updated: 2025-04-14T13:08:12.283Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45431 vulnerable 2026-06-08 05:50:36.289944 Details available
Some Dahua software products have a vulnerability of unauthenticated restart of remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could unauthenticated restart of remote DSS Server.
Published: 2022-12-27T00:00:00.000Z
Updated: 2025-04-11T23:07:11.025Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45430 vulnerable 2026-06-08 05:50:36.286648 Details available
Some Dahua software products have a vulnerability of unauthenticated enable or disable SSHD service. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could enable or disable the SSHD service.
Published: 2022-12-27T00:00:00.000Z
Updated: 2025-04-11T23:08:54.667Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45429 vulnerable 2026-06-08 05:50:36.282967 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45428 vulnerable 2026-06-08 05:50:36.280582 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45427 vulnerable 2026-06-08 05:50:36.263043 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45426 vulnerable 2026-06-08 05:50:36.260327 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45425 vulnerable 2026-06-08 05:50:36.255218 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45424 vulnerable 2026-06-08 05:50:36.252828 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45423 vulnerable 2026-06-08 05:50:36.236734 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.