2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2022-45429" ,
"sourceIdentifier" : "cybersecurity@dahuatech.com" ,
"published" : "2022-12-27T18:15:10.693" ,
"lastModified" : "2023-01-05T04:37:00.260" ,
"vulnStatus" : "Analyzed" ,
"descriptions" : [
{
"lang" : "en" ,
"value" : "Some Dahua software products have a vulnerability of server-side request forgery (SSRF). An Attacker can access internal resources by concatenating links (URL) that conform to specific rules."
2024-04-04 08:46:00 +00:00
} ,
{
"lang" : "es" ,
"value" : "Algunos productos de software de Dahua tienen una vulnerabilidad de server-side request forgery (SSRF). Un atacante puede acceder a recursos internos concatenando enlaces (URL) que se ajusten a reglas espec\u00edficas."
2023-04-24 12:24:31 +02:00
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" ,
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "NONE" ,
"baseScore" : 7.5 ,
"baseSeverity" : "HIGH"
} ,
"exploitabilityScore" : 3.9 ,
"impactScore" : 3.6
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-918"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:dahuasecurity:dss_express:7.002.1760000.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "3884EEA1-1A5A-465D-911A-C1468C48095C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:dahuasecurity:dss_express:8.0.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "546B8C47-C545-4BF6-B62E-F6D7A4EC0B9A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:dahuasecurity:dss_express:8.0.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2FFFFF73-D666-4EFD-BC9C-F35AB0884E63"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:dahuasecurity:dss_express:8.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F79147B7-FBD0-4A5A-81A4-B902366336C7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:dahuasecurity:dss_express:8.1.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B4A7BE6D-04EB-40CC-A59E-78922BA310EF"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:dahuasecurity:dss_professional:7.002.1760000.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "BA1F0C70-4274-4910-A645-EC52D1CB3847"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:dahuasecurity:dss_professional:8.0.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A7812C76-E325-4DDB-BF1F-AA0C37B073F4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:dahuasecurity:dss_professional:8.0.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F6C276F4-260B-4C98-92B7-AD5FD5B6A35C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:dahuasecurity:dss_professional:8.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "50990609-E282-4FF0-B7B3-6FF641E1F836"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:dahuasecurity:dss_professional:8.1.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6CE289B1-0442-4F55-9C8B-3B8D1B3F24E3"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:dahuasecurity:dhi-dss7016d-s2_firmware:1.001.0000001.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D729295F-15E2-4B8D-A85C-53CAB6544144"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:dahuasecurity:dhi-dss7016d-s2_firmware:8.0.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "266BDE37-4A75-4B7F-9627-DDE6C78FB593"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:dahuasecurity:dhi-dss7016d-s2_firmware:8.0.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7CA557CC-3A2B-40E0-833E-2009B6180DEB"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:dahuasecurity:dhi-dss7016d-s2_firmware:8.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E6E8AE26-5271-4BA3-8539-9B7856F5DF84"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:dahuasecurity:dhi-dss7016d-s2:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CCBDDB17-CEDD-45DA-87E0-7F15753AE9BC"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:dahuasecurity:dhi-dss7016dr-s2_firmware:1.001.0000001.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F0F2A1C3-2057-4182-B425-94C3EC1862BE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:dahuasecurity:dhi-dss7016dr-s2_firmware:8.0.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D6042411-429A-48BC-9D21-D8AD84DB11E6"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:dahuasecurity:dhi-dss7016dr-s2_firmware:8.0.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "11B6BBCD-0A83-4816-84F9-647403DA64F2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:dahuasecurity:dhi-dss7016dr-s2_firmware:8.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "78D7D57F-36EA-42DB-866F-DC9BCEAD2235"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:dahuasecurity:dhi-dss7016dr-s2:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "38A0F44A-CB7D-42EA-A8D7-373F5BD6A963"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:dahuasecurity:dhi-dss4004-s2_firmware:1.001.0000001.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D4C754C4-1908-4EF2-BB70-4EA730324D98"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:dahuasecurity:dhi-dss4004-s2_firmware:8.0.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4D060128-197D-4EEC-A486-364B1876A1B6"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:dahuasecurity:dhi-dss4004-s2_firmware:8.0.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1E8F32EF-9A87-4807-B3C0-2DC4F17553D1"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:dahuasecurity:dhi-dss4004-s2_firmware:8.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9F9CED99-BAC5-4D7C-B10F-DF16085BC888"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:dahuasecurity:dhi-dss4004-s2:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C8C804BE-2D42-4213-A108-4426F5F0E348"
}
]
}
]
}
] ,
"references" : [
{
"url" : "https://www.dahuasecurity.com/support/cybersecurity/details/1137" ,
"source" : "cybersecurity@dahuatech.com" ,
"tags" : [
"Patch" ,
"Vendor Advisory"
]
}
]
}
