CVE-2022-30562 Open redirect in IPCHDBW2XXX IPCHFW2XXX ASI7XXXX
Attackers can redirect users to malicious sites via Host header injection when HTTPS is enabled, potentially facilitating phishing or credential theft.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2022-30562?
CVE-2022-30562 is a medium-severity vulnerability in IPCHDBW2XXX IPCHFW2XXX ASI7XXXX, published on 28 Jun 2022. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
If the user enables the https function on the device, an attacker can modify the user’s request data packet through a man-in-the-middle attack ,Injection of a malicious URL in the Host: header of the HTTP Request results in a 302 redirect to an attacker-controlled page.
Weakness: CWE-601
Which versions are affected by CVE-2022-30562?
It affects 40 products.
Products include Dahuasecurity Asi7213x-T1 Firmware, Dahuasecurity Asi7213x Firmware, Dahuasecurity Asi7223x-a-T1 Firmware, Dahuasecurity Asi7223x-a Firmware, Dahuasecurity Ipc-Hdbw2230e-S-S2 Firmware, Dahuasecurity Ipc-Hdbw2231e-S-S2 Firmware and 34 more.
How do I fix CVE-2022-30562?
No fix has been published for CVE-2022-30562 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-30562 being exploited?
There is no known exploitation of CVE-2022-30562 in the wild and no public exploit code.
Other vulnerabilities in IPCHDBW2XXX IPCHFW2XXX ASI7XXXX
Sources
Also known as GHSA-hr2w-874h-3jjj.