7.5
High
CVE-2022-45425 Some Dahua software products have a vulnerability of using of hard-coded cryptographic key
Description
Some Dahua software products have a vulnerability of using of hard-coded cryptographic key. An attacker can obtain the AES crypto key by exploiting this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| DSS Professional, DSS Express, DHI-DSS7016D-S2/DHI-DSS7016DR-S2, DHI-DSS4004-S2 | Versions not published |
Other CVEs of DSS Professional, DSS Express, DHI-DSS7016D-S2/DHI-DSS7016DR-S2, DHI-DSS4004-S2
The 10 CVEs of DSS Professional, DSS Express, DHI-DSS7016D-S2/DHI-DSS7016DR-S2, DHI-DSS4004-S2 →
CVE-2022-45423
Some Dahua software products have a vulnerability of unauthenticated request of MQTT credentials
7.5
High
CVE-2022-45424
Some Dahua software products have a vulnerability of unauthenticated request of AES crypto key
5.3
Medium
CVE-2022-45433
Some Dahua software products have a vulnerability of unauthenticated traceroute host from remote DSS Server
3.7
Low
CVE-2022-45426
Some Dahua software products have a vulnerability of unrestricted download of file
6.5
Medium