CVE-2022-30562: Medium severity dahua ipc-hdbw2431e-s-s2 firmware vulnerability
Published Jun 28, 2022
·Updated
If the user enables the https function on the device, an attacker can modify the user’s request data packet through a man-in-the-middle attack ,Injection of a malicious URL in the Host: header of the HTTP Request results in a 302 redirect to an attacker-controlled page.
Affected Software
80 affected components
Dahuasecurity Ipc-hdbw2431e-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2431e-s-s2
Dahuasecurity Ipc-hdbw2831e-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2831e-s-s2
Dahuasecurity Ipc-hdbw2230e-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2230e-s-s2
Dahuasecurity Ipc-hdbw2831r-zs-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2831r-zs-s2
Dahuasecurity Ipc-hdbw2831r-zas-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2831r-zas-s2
Dahuasecurity Ipc-hdbw2531r-zs-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2531r-zs-s2
Dahuasecurity Ipc-hdbw2531r-zas-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2531r-zas-s2
Dahuasecurity Ipc-hdbw2531e-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2531e-s-s2
Dahuasecurity Ipc-hdbw2431r-zs-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2431r-zs-s2
Dahuasecurity Ipc-hdbw2431r-zas-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2431r-zas-s2
Dahuasecurity Ipc-hdbw2231f-as-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2231f-as-s2
Dahuasecurity Ipc-hdbw2231e-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2231e-s-s2
Dahuasecurity Ipc-hdbw2231r-zs-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2231r-zs-s2
Dahuasecurity Ipc-hdbw2231r-zas-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2231r-zas-s2
Dahuasecurity Ipc-hfw2231m-as-i2-b-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2231m-as-i2-b-s2
Dahuasecurity Ipc-hfw2231t-as-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2231t-as-s2
Dahuasecurity Ipc-hfw2231s-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2231s-s-s2
Dahuasecurity Ipc-hfw2231t-zs-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2231t-zs-s2
Dahuasecurity Ipc-hfw2231t-zas-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2231t-zas-s2
Dahuasecurity Ipc-hfw2230s-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2230s-s-s2
Dahuasecurity Ipc-hfw2431t-as-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2431t-as-s2
Dahuasecurity Ipc-hfw2431t-zs-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2431t-zs-s2
Dahuasecurity Ipc-hfw2431t-zas-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2431t-zas-s2
Dahuasecurity Ipc-hfw2431s-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2431s-s-s2
Dahuasecurity Ipc-hfw2531t-as-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2531t-as-s2
Dahuasecurity Ipc-hfw2531t-zs-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2531t-zs-s2
Dahuasecurity Ipc-hfw2531t-zas-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2531t-zas-s2
Dahuasecurity Ipc-hfw2531s-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2531s-s-s2
Dahuasecurity Ipc-hfw2831t-as-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2831t-as-s2
Dahuasecurity Ipc-hfw2831t-zs-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2831t-zs-s2
Dahuasecurity Ipc-hfw2831t-zas-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2831t-zas-s2
Dahuasecurity Ipc-hfw2831s-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2831s-s-s2
Dahuasecurity Ipc-hfw2439m-as-led-b-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2439m-as-led-b-s2
Dahuasecurity Ipc-hfw2239m-as-led-b-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2239m-as-led-b-s2
Dahuasecurity Ipc-hfw2439s-sa-led-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2439s-sa-led-s2
Dahuasecurity Ipc-hfw2239s-sa-led-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2239s-sa-led-s2
Dahuasecurity Asi7213x-t1 Firmware<2021-09
Dahuasecurity Asi7213x-t1
Dahuasecurity Asi7223x-a-t1 Firmware<2021-09
Dahuasecurity Asi7223x-a-t1
Dahuasecurity Asi7223x-a Firmware<2021-09
Dahuasecurity Asi7223x-a
Dahuasecurity Asi7213x Firmware<2021-09
Dahuasecurity Asi7213x
Event History
Jun 28, 2022
CVE Published
via MITRE·01:43 PM
Data Sourced
via MITRE·01:43 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-30562?
CVE-2022-30562 has a critical severity rating due to its potential for exploitation via man-in-the-middle attacks.
2
How do I fix CVE-2022-30562?
To mitigate CVE-2022-30562, ensure that the affected device firmware is updated to a version released after April 2022.
3
What devices are impacted by CVE-2022-30562?
CVE-2022-30562 affects several Dahuasecurity IPC models, primarily those with firmware versions earlier than April 2022.
4
What type of attack does CVE-2022-30562 enable?
CVE-2022-30562 allows remote attackers to modify user request data through man-in-the-middle attacks.
5
What are the potential consequences of CVE-2022-30562?
Exploitation of CVE-2022-30562 can lead to unauthorized redirection of users to attacker-controlled pages.