ICSA-22-193-01

icsaUScisa_csaf_ot

Dahua ASI7213X-T1 (Update A)

Advisory ansehen veröffentlicht 2022-07-12

Successful exploitation of these vulnerabilities could allow unauthorized access, upload malicious files, and cause a denial-of-service condition.

01

beschreibt (4)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2022-30563UShigh7.4OT erhöht—
When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in through ONVIF, he can log in to the device by replaying the user's login packe…
CVE-2022-30562USmedium4.7—
If the user enables the https function on the device, an attacker can modify the user’s request data packet through a man-in-the-middle attack ,Injection of a malicious URL in the…
CVE-2022-30561USmedium5.9OT erhöht—
When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in, the attacker could log in to the device by replaying the user's login packet.
CVE-2022-30560UShigh7.4—
When an attacker obtaining the administrative account and password, or through a man-in-the-middle attack, the attacker could send a specified crafted packet to the vulnerable inte…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (12)

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan