CVE-2022-45426
Assigner: dahua
Published: 2022-12-27T00:00:00
State: PUBLISHED
descriptions: value: Some Dahua software products have a vulnerability of unrestricted download of file. After obtaining the permissions of ordinary users, by sending a specific crafted packet to the vulnerable interface, an attacker can download arbitrary files.
affected: vendor: n/a
product: DSS Professional, DSS Express, DHI-DSS7016D-S2/DHI-DSS7016DR-S2, DHI-DSS4004-S2
versions: version: V8.0.2, V8.0.4, V8.1
status: affected
problemTypes: descriptions: type: text
description: External Control of File Name or Path