VULNERABILITY INTELLIGENCE

CVE-2022-45434

CVSS score5.9 MEDIUM
EPSS probability0.70%
CISA KEVNot currently listed
Published2022-12-27
Last modified2026-06-17

Description

Some Dahua software products have a vulnerability of unauthenticated un-throttled ICMP requests on remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could exploit the victim server to launch ICMP request attack to the designated target host.