Dahua Technology DSS Professional 8.0.4
Approved changes feed: RSS · Atom
cpe:2.3:a:dahuasecurity:dss_professional:8.0.4:*:*:*:*:*:*:*
part: a version: 8.0.4 update: *
| Vendor | Dahuasecurity (49e0e28a-d51a-562c-8056-164d442a6fc2) |
|---|---|
| Product | Dss Professional (ff5af89a-ab76-56f8-ac19-05cbfa35c011) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-45434 |
vulnerable | 2026-06-03 14:48:24.202497 |
Details available
Some Dahua software products have a vulnerability of unauthenticated un-throttled ICMP requests on remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could exploit the victim server to launch ICMP request attack to the designated target host.
Published: 2022-12-27T00:00:00.000Z
Updated: 2025-04-14T12:59:11.203Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45433 |
vulnerable | 2026-06-03 14:48:24.201594 |
Details available
Some Dahua software products have a vulnerability of unauthenticated traceroute host from remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could get the traceroute results.
Published: 2022-12-27T00:00:00.000Z
Updated: 2025-04-14T13:05:43.020Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45432 |
vulnerable | 2026-06-03 14:48:24.200609 |
Details available
Some Dahua software products have a vulnerability of unauthenticated search for devices. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could unauthenticated search for devices in range of IPs from remote DSS Server.
Published: 2022-12-27T00:00:00.000Z
Updated: 2025-04-14T13:08:12.283Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45431 |
vulnerable | 2026-06-03 14:48:24.190333 |
Details available
Some Dahua software products have a vulnerability of unauthenticated restart of remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could unauthenticated restart of remote DSS Server.
Published: 2022-12-27T00:00:00.000Z
Updated: 2025-04-11T23:07:11.025Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45430 |
vulnerable | 2026-06-03 14:48:24.189119 |
Details available
Some Dahua software products have a vulnerability of unauthenticated enable or disable SSHD service. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could enable or disable the SSHD service.
Published: 2022-12-27T00:00:00.000Z
Updated: 2025-04-11T23:08:54.667Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45429 |
vulnerable | 2026-06-03 14:48:24.188208 |
Details available
Some Dahua software products have a vulnerability of server-side request forgery (SSRF). An Attacker can access internal resources by concatenating links (URL) that conform to specific rules.
Published: 2022-12-27T00:00:00.000Z
Updated: 2025-04-11T23:11:09.562Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45428 |
vulnerable | 2026-06-03 14:48:24.187247 |
Details available
Some Dahua software products have a vulnerability of sensitive information leakage. After obtaining the permissions of administrators, by sending a specific crafted packet to the vulnerable interface, an attacker can obtain the debugging information.
Published: 2022-12-27T00:00:00.000Z
Updated: 2025-04-14T13:16:52.157Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45427 |
vulnerable | 2026-06-03 14:48:24.175631 |
Details available
Some Dahua software products have a vulnerability of unrestricted upload of file. After obtaining the permissions of administrators, by sending a specific crafted packet to the vulnerable interface, an attacker can upload arbitrary files.
Published: 2022-12-27T00:00:00.000Z
Updated: 2025-04-14T13:18:05.574Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45426 |
vulnerable | 2026-06-03 14:48:24.174720 |
Details available
Some Dahua software products have a vulnerability of unrestricted download of file. After obtaining the permissions of ordinary users, by sending a specific crafted packet to the vulnerable interface, an attacker can download arbitrary files.
Published: 2022-12-27T00:00:00.000Z
Updated: 2025-04-14T13:19:12.304Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45425 |
vulnerable | 2026-06-03 14:48:24.173704 |
Details available
Some Dahua software products have a vulnerability of using of hard-coded cryptographic key. An attacker can obtain the AES crypto key by exploiting this vulnerability.
Published: 2022-12-27T00:00:00.000Z
Updated: 2025-04-14T13:22:30.367Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45424 |
vulnerable | 2026-06-03 14:48:24.172791 |
Details available
Some Dahua software products have a vulnerability of unauthenticated request of AES crypto key. An attacker can obtain the AES crypto key by sending a specific crafted packet to the vulnerable interface.
Published: 2022-12-27T00:00:00.000Z
Updated: 2025-04-14T13:23:36.216Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45423 |
vulnerable | 2026-06-03 14:48:24.163591 |
Details available
Some Dahua software products have a vulnerability of unauthenticated request of MQTT credentials. An attacker can obtain encrypted MQTT credentials by sending a specific crafted packet to the vulnerable interface (the credentials cannot be directly exploited).
Published: 2022-12-27T00:00:00.000Z
Updated: 2025-04-14T13:00:23.939Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.