CVE-2022-30561: Medium severity dahua ipc-hdbw2431e-s-s2 firmware vulnerability
Published Jun 28, 2022
·Updated
When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in, the attacker could log in to the device by replaying the user's login packet.
Affected Software
80 affected components
Dahuasecurity Ipc-hdbw2431e-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2431e-s-s2
Dahuasecurity Ipc-hdbw2831e-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2831e-s-s2
Dahuasecurity Ipc-hdbw2230e-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2230e-s-s2
Dahuasecurity Ipc-hdbw2831r-zs-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2831r-zs-s2
Dahuasecurity Ipc-hdbw2831r-zas-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2831r-zas-s2
Dahuasecurity Ipc-hdbw2531r-zs-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2531r-zs-s2
Dahuasecurity Ipc-hdbw2531r-zas-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2531r-zas-s2
Dahuasecurity Ipc-hdbw2531e-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2531e-s-s2
Dahuasecurity Ipc-hdbw2431r-zs-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2431r-zs-s2
Dahuasecurity Ipc-hdbw2431r-zas-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2431r-zas-s2
Dahuasecurity Ipc-hdbw2231f-as-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2231f-as-s2
Dahuasecurity Ipc-hdbw2231e-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2231e-s-s2
Dahuasecurity Ipc-hdbw2231r-zs-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2231r-zs-s2
Dahuasecurity Ipc-hdbw2231r-zas-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2231r-zas-s2
Dahuasecurity Ipc-hfw2231m-as-i2-b-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2231m-as-i2-b-s2
Dahuasecurity Ipc-hfw2231t-as-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2231t-as-s2
Dahuasecurity Ipc-hfw2231s-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2231s-s-s2
Dahuasecurity Ipc-hfw2231t-zs-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2231t-zs-s2
Dahuasecurity Ipc-hfw2231t-zas-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2231t-zas-s2
Dahuasecurity Ipc-hfw2230s-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2230s-s-s2
Dahuasecurity Ipc-hfw2431t-as-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2431t-as-s2
Dahuasecurity Ipc-hfw2431t-zs-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2431t-zs-s2
Dahuasecurity Ipc-hfw2431t-zas-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2431t-zas-s2
Dahuasecurity Ipc-hfw2431s-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2431s-s-s2
Dahuasecurity Ipc-hfw2531t-as-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2531t-as-s2
Dahuasecurity Ipc-hfw2531t-zs-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2531t-zs-s2
Dahuasecurity Ipc-hfw2531t-zas-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2531t-zas-s2
Dahuasecurity Ipc-hfw2531s-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2531s-s-s2
Dahuasecurity Ipc-hfw2831t-as-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2831t-as-s2
Dahuasecurity Ipc-hfw2831t-zs-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2831t-zs-s2
Dahuasecurity Ipc-hfw2831t-zas-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2831t-zas-s2
Dahuasecurity Ipc-hfw2831s-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2831s-s-s2
Dahuasecurity Ipc-hfw2439m-as-led-b-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2439m-as-led-b-s2
Dahuasecurity Ipc-hfw2239m-as-led-b-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2239m-as-led-b-s2
Dahuasecurity Ipc-hfw2439s-sa-led-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2439s-sa-led-s2
Dahuasecurity Ipc-hfw2239s-sa-led-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2239s-sa-led-s2
Dahuasecurity Asi7213x-t1 Firmware<2021-09
Dahuasecurity Asi7213x-t1
Dahuasecurity Asi7223x-a-t1 Firmware<2021-09
Dahuasecurity Asi7223x-a-t1
Dahuasecurity Asi7223x-a Firmware<2021-09
Dahuasecurity Asi7223x-a
Dahuasecurity Asi7213x Firmware<2021-09
Dahuasecurity Asi7213x
Event History
Jun 28, 2022
CVE Published
via MITRE·01:42 PM
Data Sourced
via MITRE·01:42 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-30561?
CVE-2022-30561 is classified as a medium severity vulnerability.
2
How do I fix CVE-2022-30561?
To fix CVE-2022-30561, update the firmware of affected Dahuasecurity devices to a version released after April 2022.
3
What types of attacks can exploit CVE-2022-30561?
CVE-2022-30561 can be exploited through man-in-the-middle attacks, allowing an attacker to replay login packets.
4
Which Dahuasecurity devices are affected by CVE-2022-30561?
Affected devices include the IPC-HDBW2431E-S-S2, IPC-HDBW2831E-S-S2, IPC-HDBW2230E-S-S2, among others listed in the CVE report.
5
Can CVE-2022-30561 lead to unauthorized access?
Yes, CVE-2022-30561 can lead to unauthorized access if an attacker successfully replays a user's login packet.