VULNERABILITY INTELLIGENCE
CVE-2022-45434
CVSS score5.9 MEDIUM
EPSS probability0.70%
CISA KEVNot currently listed
Published2022-12-27
Last modified2026-06-17
Description
Some Dahua software products have a vulnerability of unauthenticated un-throttled ICMP requests on remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could exploit the victim server to launch ICMP request attack to the designated target host.