CVE-2022-45427
Assigner: dahua
Published: 2022-12-27T00:00:00
State: PUBLISHED
descriptions: value: Some Dahua software products have a vulnerability of unrestricted upload of file. After obtaining the permissions of administrators, by sending a specific crafted packet to the vulnerable interface, an attacker can upload arbitrary files.
affected: vendor: n/a
product: DSS Professional, DSS Express, DHI-DSS7016D-S2/DHI-DSS7016DR-S2, DHI-DSS4004-S2
versions: version: V8.0.2, V8.0.4, V8.1
status: affected
problemTypes: descriptions: type: text
description: Unrestricted Upload of File with Dangerous Type