CVE-2022-30562

Published: Jun 28, 2022Modified: Nov 21, 2024

4.7

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 1.6 / Impact: 2.7

Source: NVD

Description

If the user enables the https function on the device, an attacker can modify the user’s request data packet through a man-in-the-middle attack ,Injection of a malicious URL in the Host: header of the HTTP Request results in a 302 redirect to an attacker-controlled page.

Affected (40)

Dahuasecurity

40 products

Ipc Hdbw2431e S S2 Firmware

Ipc Hdbw2230e S S2 Firmware

Ipc Hdbw2831r Zs S2 Firmware

Ipc Hdbw2831r Zas S2 Firmware

Ipc Hdbw2831e S S2 Firmware

Ipc Hdbw2531r Zs S2 Firmware

Ipc Hdbw2531r Zas S2 Firmware

Ipc Hdbw2531e S S2 Firmware

Ipc Hdbw2431r Zs S2 Firmware

Ipc Hdbw2431r Zas S2 Firmware

Ipc Hdbw2231f As S2 Firmware

Ipc Hdbw2231e S S2 Firmware

Ipc Hdbw2231r Zs S2 Firmware

Ipc Hdbw2231r Zas S2 Firmware

Ipc Hfw2231m As I2 B S2 Firmware

Ipc Hfw2231t As S2 Firmware

Ipc Hfw2231s S S2 Firmware

Ipc Hfw2231t Zs S2 Firmware

Ipc Hfw2231t Zas S2 Firmware

Ipc Hfw2230s S S2 Firmware

Ipc Hfw2431t As S2 Firmware

Ipc Hfw2431t Zs S2 Firmware

Ipc Hfw2431t Zas S2 Firmware

Ipc Hfw2431s S S2 Firmware

Ipc Hfw2531t As S2 Firmware

Ipc Hfw2531t Zs S2 Firmware

Ipc Hfw2531t Zas S2 Firmware

Ipc Hfw2531s S S2 Firmware

Ipc Hfw2831t As S2 Firmware

Ipc Hfw2831t Zs S2 Firmware

Ipc Hfw2831t Zas S2 Firmware

Ipc Hfw2831s S S2 Firmware

Ipc Hfw2439m As Led B S2 Firmware

Ipc Hfw2239m As Led B S2 Firmware

Ipc Hfw2439s Sa Led S2 Firmware

Ipc Hfw2239s Sa Led S2 Firmware

Asi7213x T1 Firmware

Asi7223x A T1 Firmware

Asi7223x A Firmware

Asi7213x Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hdbw2431e S S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hdbw2431e S S2	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hdbw2230e S S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hdbw2230e S S2	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hdbw2831r Zs S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hdbw2831r Zs S2	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hdbw2831r Zas S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hdbw2831r Zas S2	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hdbw2831e S S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hdbw2831e S S2	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hdbw2531r Zs S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hdbw2531r Zs S2	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hdbw2531r Zas S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hdbw2531r Zas S2	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hdbw2531e S S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hdbw2531e S S2	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hdbw2431r Zs S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hdbw2431r Zs S2	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hdbw2431r Zas S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hdbw2431r Zas S2	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hdbw2231f As S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hdbw2231f As S2	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hdbw2231e S S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hdbw2231e S S2	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hdbw2231r Zs S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hdbw2231r Zs S2	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hdbw2231r Zas S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hdbw2231r Zas S2	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hfw2231m As I2 B S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hfw2231m As I2 B S2	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hfw2231t As S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hfw2231t As S2	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hfw2231s S S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hfw2231s S S2	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hfw2231t Zs S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hfw2231t Zs S2	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hfw2231t Zas S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hfw2231t Zas S2	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hfw2230s S S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hfw2230s S S2	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hfw2431t As S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hfw2431t As S2	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hfw2431t Zs S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hfw2431t Zs S2	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hfw2431t Zas S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hfw2431t Zas S2	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hfw2431s S S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hfw2431s S S2	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hfw2531t As S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hfw2531t As S2	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hfw2531t Zs S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hfw2531t Zs S2	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hfw2531t Zas S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hfw2531t Zas S2	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hfw2531s S S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hfw2531s S S2	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hfw2831t As S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hfw2831t As S2	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hfw2831t Zs S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hfw2831t Zs S2	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hfw2831t Zas S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hfw2831t Zas S2	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hfw2831s S S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hfw2831s S S2	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hfw2439m As Led B S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hfw2439m As Led B S2	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hfw2239m As Led B S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hfw2239m As Led B S2	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hfw2439s Sa Led S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hfw2439s Sa Led S2	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Ipc Hfw2239s Sa Led S2 Firmware	Before 2022-04

Running on/with	Platform Versions
Dahuasecurity Ipc Hfw2239s Sa Led S2	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Asi7213x T1 Firmware	Before 2021-09

Running on/with	Platform Versions
Dahuasecurity Asi7213x T1	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Asi7223x A T1 Firmware	Before 2021-09

Running on/with	Platform Versions
Dahuasecurity Asi7223x A T1	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Asi7223x A Firmware	Before 2021-09

Running on/with	Platform Versions
Dahuasecurity Asi7223x A	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dahuasecurity Asi7213x Firmware	Before 2021-09

Running on/with	Platform Versions
Dahuasecurity Asi7213x	All versions

Related CWEs

CWE-601

URL Redirection to Untrusted Site ('Open Redirect')

A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.

References (2)

https://www.dahuasecurity.com/support/cybersecurity/details/1017

Source: cybersecurity@dahuatech.com

Vendor Advisory

https://www.dahuasecurity.com/support/cybersecurity/details/1017

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.