Lucene search
DahuaCVELIST:CVE-2022-45424HistoryDec 27, 2022 - 12:00 a.m.
CVE-2022-45424
2022-12-2700:00:00
dahua
www.cve.org
dahua
software
aes
crypto key
unauthenticated request
vulnerability
crafted packet
interface
Some Dahua software products have a vulnerability of unauthenticated request of AES crypto key. An attacker can obtain the AES crypto key by sending a specific crafted packet to the vulnerable interface.
CNA Affected
[
{
"vendor": "n/a",
"product": "DSS Professional, DSS Express, DHI-DSS7016D-S2/DHI-DSS7016DR-S2, DHI-DSS4004-S2",
"versions": [
{
"version": "V8.0.2, V8.0.4, V8.1",
"status": "affected"
}
]
}
]Related
nvd
nvd
CVE-2022-45424
2022-12-27 18:15:10
cve
cve
CVE-2022-45424
2022-12-27 18:15:10
prion
prion
Information disclosure
2022-12-27 18:15:00