Lucene search

K
cvelistDahuaCVELIST:CVE-2022-45429
HistoryDec 27, 2022 - 12:00 a.m.

CVE-2022-45429

2022-12-2700:00:00
dahua
www.cve.org
3
dahua software vulnerability
ssrf
url concatenation

EPSS

0.002

Percentile

51.6%

Some Dahua software products have a vulnerability of server-side request forgery (SSRF). An Attacker can access internal resources by concatenating links (URL) that conform to specific rules.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "DSS Professional, DSS Express, DHI-DSS7016D-S2/DHI-DSS7016DR-S2, DHI-DSS4004-S2",
    "versions": [
      {
        "version": "V8.0.2, V8.0.4, V8.1",
        "status": "affected"
      }
    ]
  }
]

EPSS

0.002

Percentile

51.6%

Related for CVELIST:CVE-2022-45429