CVE-2022-45434

Katalog CVE

CVSS 5.9 · Medium EPSS 0,68%

Kerentanan Allocation of Resources Without Limits or Throttling pada dahuasecurity dhi-dss7016d-s2 firmware, dahuasecurity dhi-dss7016dr-s2 firmware +3 lainnya. Skor CVSS 3.1 5.9 (Medium) menurut NVD.

Deskripsi (NVD)

Some Dahua software products have a vulnerability of unauthenticated un-throttled ICMP requests on remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could exploit the victim server to launch ICMP request attack to the designated target host.

Rincian

Terbit di NVD

27 Desember 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.9 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-770: Allocation of Resources Without Limits or Throttling

EPSS (30 hari)

0,68% peluang dieksploitasi; lebih tinggi dari 51,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.dahuasecurity.com/support/cybersecurity/details/1137 patch · advisory vendor