CVE-2022-30563: High severity dahua ipc-hdbw2431e-s-s2 firmware vulnerability
Published Jun 28, 2022
·Updated
When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in through ONVIF, he can log in to the device by replaying the user's login packet.
Affected Software
80 affected components
Dahuasecurity Ipc-hdbw2431e-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2431e-s-s2
Dahuasecurity Ipc-hdbw2831e-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2831e-s-s2
Dahuasecurity Ipc-hdbw2230e-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2230e-s-s2
Dahuasecurity Ipc-hdbw2831r-zs-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2831r-zs-s2
Dahuasecurity Ipc-hdbw2831r-zas-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2831r-zas-s2
Dahuasecurity Ipc-hdbw2531r-zs-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2531r-zs-s2
Dahuasecurity Ipc-hdbw2531r-zas-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2531r-zas-s2
Dahuasecurity Ipc-hdbw2531e-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2531e-s-s2
Dahuasecurity Ipc-hdbw2431r-zs-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2431r-zs-s2
Dahuasecurity Ipc-hdbw2431r-zas-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2431r-zas-s2
Dahuasecurity Ipc-hdbw2231f-as-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2231f-as-s2
Dahuasecurity Ipc-hdbw2231e-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2231e-s-s2
Dahuasecurity Ipc-hdbw2231r-zs-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2231r-zs-s2
Dahuasecurity Ipc-hdbw2231r-zas-s2 Firmware<2022-04
Dahuasecurity Ipc-hdbw2231r-zas-s2
Dahuasecurity Ipc-hfw2231m-as-i2-b-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2231m-as-i2-b-s2
Dahuasecurity Ipc-hfw2231t-as-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2231t-as-s2
Dahuasecurity Ipc-hfw2231s-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2231s-s-s2
Dahuasecurity Ipc-hfw2231t-zs-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2231t-zs-s2
Dahuasecurity Ipc-hfw2231t-zas-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2231t-zas-s2
Dahuasecurity Ipc-hfw2230s-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2230s-s-s2
Dahuasecurity Ipc-hfw2431t-as-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2431t-as-s2
Dahuasecurity Ipc-hfw2431t-zs-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2431t-zs-s2
Dahuasecurity Ipc-hfw2431t-zas-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2431t-zas-s2
Dahuasecurity Ipc-hfw2431s-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2431s-s-s2
Dahuasecurity Ipc-hfw2531t-as-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2531t-as-s2
Dahuasecurity Ipc-hfw2531t-zs-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2531t-zs-s2
Dahuasecurity Ipc-hfw2531t-zas-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2531t-zas-s2
Dahuasecurity Ipc-hfw2531s-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2531s-s-s2
Dahuasecurity Ipc-hfw2831t-as-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2831t-as-s2
Dahuasecurity Ipc-hfw2831t-zs-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2831t-zs-s2
Dahuasecurity Ipc-hfw2831t-zas-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2831t-zas-s2
Dahuasecurity Ipc-hfw2831s-s-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2831s-s-s2
Dahuasecurity Ipc-hfw2439m-as-led-b-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2439m-as-led-b-s2
Dahuasecurity Ipc-hfw2239m-as-led-b-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2239m-as-led-b-s2
Dahuasecurity Ipc-hfw2439s-sa-led-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2439s-sa-led-s2
Dahuasecurity Ipc-hfw2239s-sa-led-s2 Firmware<2022-04
Dahuasecurity Ipc-hfw2239s-sa-led-s2
Dahuasecurity Asi7213x-t1 Firmware<2021-09
Dahuasecurity Asi7213x-t1
Dahuasecurity Asi7223x-a-t1 Firmware<2021-09
Dahuasecurity Asi7223x-a-t1
Dahuasecurity Asi7223x-a Firmware<2021-09
Dahuasecurity Asi7223x-a
Dahuasecurity Asi7213x Firmware<2021-09
Dahuasecurity Asi7213x
Event History
Jun 28, 2022
CVE Published
via MITRE·01:44 PM
Data Sourced
via MITRE·01:44 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-30563?
CVE-2022-30563 has been classified as a high-severity vulnerability.
2
How do I fix CVE-2022-30563?
To mitigate CVE-2022-30563, users should update the affected Dahuasecurity firmware to a version released after April 2022.
3
What devices are affected by CVE-2022-30563?
CVE-2022-30563 affects multiple Dahuasecurity IPC models running firmware versions prior to April 2022.
4
What type of attack does CVE-2022-30563 enable?
CVE-2022-30563 allows attackers to execute a man-in-the-middle attack to replay user login packets.
5
Are there any workarounds for CVE-2022-30563 if updates can’t be applied immediately?
As an immediate workaround for CVE-2022-30563, limit network access to the devices to trusted networks only.