CVE-2022-45432 Auth bypass in DSS Professional、DSS Express、DHI-DSS7016D-S2/DHI-DSS7016DR-S2、DHI-DSS4004-S2
An attacker can bypass authentication to remotely search for devices within the DSS Server network range by sending crafted packets.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-45432?
CVE-2022-45432 is a medium-severity authentication bypass vulnerability in DSS Professional、DSS Express、DHI-DSS7016D-S2/DHI-DSS7016DR-S2、DHI-DSS4004-S2, published on 27 Dec 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Some Dahua software products have a vulnerability of unauthenticated search for devices. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could unauthenticated search for devices in range of IPs from remote DSS Server.
Weakness: CWE-306
Which versions are affected by CVE-2022-45432?
It affects 5 products.
Products include Dahuasecurity Dhi-Dss4004-S2 Firmware, Dahuasecurity Dhi-Dss7016d-S2 Firmware, Dahuasecurity Dhi-Dss7016dr-S2 Firmware, Dahuasecurity Dss Express, Dahuasecurity Dss Professional.
How do I fix CVE-2022-45432?
No fix has been published for CVE-2022-45432 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2022-45432 being exploited?
There is no known exploitation of CVE-2022-45432 in the wild and no public exploit code.
Other vulnerabilities in DSS Professional、DSS Express、DHI-DSS7016D-S2/DHI-DSS7016DR-S2、DHI-DSS4004-S2
- CVE-2022-45423 Information disclosure in DSS Professional, DSS Express, DHI-DSS7016D-S2/DHI-DSS7016DR-S2, DHI-DSS4004-S2
- CVE-2022-45425 Hardcoded credentials in DSS Professional, DSS Express, DHI-DSS7016D-S2/DHI-DSS7016DR-S2, DHI-DSS4004-S2
- CVE-2022-45429 Server-side request forgery in DSS Professional, DSS Express, DHI-DSS7016D-S2/DHI-DSS7016DR-S2, DHI-DSS4004-S2
- CVE-2022-45431 Auth bypass in DSS Professional, DSS Express, DHI-DSS7016D-S2/DHI-DSS7016DR-S2, DHI-DSS4004-S2
- CVE-2022-45427 File upload in DSS Professional, DSS Express, DHI-DSS7016D-S2/DHI-DSS7016DR-S2, DHI-DSS4004-S2
Sources
Also known as GHSA-2pf6-r9w4-v7hm.