Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:dss_professional,_dss_express,_dhi-dss7016d-s2/dhi-dss7016dr-s2,_dhi-dss4004-s2:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductDss Professional, Dss Express, Dhi Dss7016D S2/Dhi Dss7016Dr S2, Dhi Dss4004 S2 (35ebfad1-d05c-58d1-9a36-714af1b46567)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-45434 vulnerable 2026-06-08 05:50:36.309347 Details available
Some Dahua software products have a vulnerability of unauthenticated un-throttled ICMP requests on remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could exploit the victim server to launch ICMP request attack to the designated target host.
Published: 2022-12-27T00:00:00.000Z
Updated: 2025-04-14T12:59:11.203Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45433 vulnerable 2026-06-08 05:50:36.306947 Details available
Some Dahua software products have a vulnerability of unauthenticated traceroute host from remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could get the traceroute results.
Published: 2022-12-27T00:00:00.000Z
Updated: 2025-04-14T13:05:43.020Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45431 vulnerable 2026-06-08 05:50:36.288479 Details available
Some Dahua software products have a vulnerability of unauthenticated restart of remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could unauthenticated restart of remote DSS Server.
Published: 2022-12-27T00:00:00.000Z
Updated: 2025-04-11T23:07:11.025Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45430 vulnerable 2026-06-08 05:50:36.284896 Details available
Some Dahua software products have a vulnerability of unauthenticated enable or disable SSHD service. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could enable or disable the SSHD service.
Published: 2022-12-27T00:00:00.000Z
Updated: 2025-04-11T23:08:54.667Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45429 vulnerable 2026-06-08 05:50:36.282693 Details available
Some Dahua software products have a vulnerability of server-side request forgery (SSRF). An Attacker can access internal resources by concatenating links (URL) that conform to specific rules.
Published: 2022-12-27T00:00:00.000Z
Updated: 2025-04-11T23:11:09.562Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45427 vulnerable 2026-06-08 05:50:36.262158 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45426 vulnerable 2026-06-08 05:50:36.260033 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45425 vulnerable 2026-06-08 05:50:36.254913 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45424 vulnerable 2026-06-08 05:50:36.252429 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45423 vulnerable 2026-06-08 05:50:36.233312 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.