ICSA-22-193-01

icsaUScisa_csaf_ot

Dahua ASI7213X-T1 (Update A)

view advisory published 2022-07-12

Successful exploitation of these vulnerabilities could allow unauthorized access, upload malicious files, and cause a denial-of-service condition.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2022-30563UShigh7.4OT elevated—
When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in through ONVIF, he can log in to the device by replaying the user's login packe…
CVE-2022-30562USmedium4.7—
If the user enables the https function on the device, an attacker can modify the user’s request data packet through a man-in-the-middle attack ,Injection of a malicious URL in the…
CVE-2022-30561USmedium5.9OT elevated—
When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in, the attacker could log in to the device by replaying the user's login packet.
CVE-2022-30560UShigh7.4—
When an attacker obtaining the administrative account and password, or through a man-in-the-middle attack, the attacker could send a specified crafted packet to the vulnerable inte…
02

references

External citations — patches, advisories, analysis.

03

remediations (12)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan