{"containers": {"cna": {"affected": [{"product": "IPCHDBW2XXX IPCHFW2XXX ASI7XXXX", "vendor": "n/a", "versions": [{"status": "affected", "version": "Versions which Build time before April, 2022"}]}], "descriptions": [{"lang": "en", "value": "If the user enables the https function on the device, an attacker can modify the user\u2019s request data packet through a man-in-the-middle attack ,Injection of a malicious URL in the Host: header of the HTTP Request results in a 302 redirect to an attacker-controlled page."}], "problemTypes": [{"descriptions": [{"description": "URL Redirection to Untrusted Site ('Open Redirect')", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2022-06-28T13:43:54", "orgId": "79ee569e-7d1e-4364-98f0-3a18e2a739ad", "shortName": "dahua"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.dahuasecurity.com/support/cybersecurity/details/1017"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cybersecurity@dahuatech.com", "ID": "CVE-2022-30562", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "IPCHDBW2XXX IPCHFW2XXX ASI7XXXX", "version": {"version_data": [{"version_value": "Versions which Build time before April, 2022"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "If the user enables the https function on the device, an attacker can modify the user\u2019s request data packet through a man-in-the-middle attack ,Injection of a malicious URL in the Host: header of the HTTP Request results in a 302 redirect to an attacker-controlled page."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "URL Redirection to Untrusted Site ('Open Redirect')"}]}]}, "references": {"reference_data": [{"name": "https://www.dahuasecurity.com/support/cybersecurity/details/1017", "refsource": "MISC", "url": "https://www.dahuasecurity.com/support/cybersecurity/details/1017"}]}}}}, "cveMetadata": {"assignerOrgId": "79ee569e-7d1e-4364-98f0-3a18e2a739ad", "assignerShortName": "dahua", "cveId": "CVE-2022-30562", "datePublished": "2022-06-28T13:43:54", "dateReserved": "2022-05-11T00:00:00", "dateUpdated": "2022-06-28T13:43:54", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hdbw2431e-s-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D2D2136E-8A6C-47C0-93B9-3871CE3BEE68", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hdbw2431e-s-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "EDE496EA-85DC-4296-A50D-0D0E1DABE0F8", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hdbw2831e-s-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9D203BA6-F0AD-4E8B-BEF2-5C5F69944629", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hdbw2831e-s-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "EEE1F283-44C0-4CC1-86C6-8DC47050EC66", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hdbw2230e-s-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C82E57C7-AC82-4D00-A819-7D8E1BBE81DF", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hdbw2230e-s-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "04E8A3A8-CA9F-460D-8592-D536B1810B2E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hdbw2831r-zs-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "79095CD2-EDA3-44A2-9A7D-D41C17892D0A", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hdbw2831r-zs-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "ECF9F5B4-0285-4C50-914D-8815ECE30E36", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hdbw2831r-zas-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BF22A8E2-29CA-4533-BE49-8E8B676A94CA", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hdbw2831r-zas-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "4AF7827F-FC58-46DF-A8A8-04B0AFECEC8A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hdbw2831e-s-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9D203BA6-F0AD-4E8B-BEF2-5C5F69944629", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hdbw2831e-s-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "EEE1F283-44C0-4CC1-86C6-8DC47050EC66", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hdbw2531r-zs-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B4982CF9-D732-4B89-9CB1-D9E0C46C4F7A", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hdbw2531r-zs-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "4FCD64D9-283F-4ADA-A8EA-F37C2DE8ED1C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hdbw2531r-zas-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BF2503CD-E1BA-45F8-96B7-260A545F5AB3", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hdbw2531r-zas-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "0D4AEF56-C239-442E-AC20-54E488F3FB8F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hdbw2531e-s-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A4A638CB-336F-4B3A-B549-A14B33758B93", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hdbw2531e-s-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "B502A114-3608-4A30-B255-ED8CFA72FFC2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hdbw2431r-zs-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AD01632F-E921-4720-AC2D-D4EE8DBFE6C9", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hdbw2431r-zs-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "4C49C7E4-2488-4322-B143-8589B6E1047B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hdbw2431r-zas-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CB313905-6AB1-43CE-B797-0D86129F0E1F", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hdbw2431r-zas-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "751DB155-2773-4242-AEED-946DB1D86CF8", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hdbw2231f-as-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "75B3628E-2FA5-49F8-A7B8-30247B274168", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hdbw2231f-as-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "F3C4CA86-8C93-4CB0-9561-798A03D3931F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hdbw2231e-s-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "84DC0F33-23D5-4DE8-A65A-CE58231A8C63", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hdbw2231e-s-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "4ED0EBF0-08FC-4163-A568-D8873C37218A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hdbw2231r-zs-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E29F1DAC-7654-44C4-B4EA-E9D85C1CD037", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hdbw2231r-zs-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "9223BB3E-DB75-4CED-B218-99EFD07CD0D4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hdbw2231r-zas-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B82708A2-F5ED-4EC8-88A2-1DB49473D627", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hdbw2231r-zas-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "2C421C30-565C-4E1F-8C86-6C933E16B55A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hfw2231m-as-i2-b-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "89E0C19F-582E-4AEE-8FD7-F93B6A7A426B", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hfw2231m-as-i2-b-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "293A1687-4969-49A0-9EAC-361DEE22C642", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hfw2231t-as-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D8AC4C0A-1CE4-458D-9530-83E388A61F6D", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hfw2231t-as-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "0613F006-1910-4B81-80F8-72F03B0172ED", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hfw2231s-s-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1801A63E-9AAD-45F8-A423-D6B7BA5A8DFC", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hfw2231s-s-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "67378776-C0DC-4439-94C4-49E62BB2FB40", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hfw2231t-zs-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B3986C0C-F128-496B-8580-FD220F262A1A", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hfw2231t-zs-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "D0CDC574-B581-4D58-85CB-129DA9EAB8E1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hfw2231t-zas-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C6B73B4D-7B4A-4B9C-ADBE-7D759365E6D5", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hfw2231t-zas-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "A434E8FD-B383-492B-AA09-B50907E0A1AD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hfw2230s-s-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "68E4F188-7958-4FF3-8495-6CB59047F34D", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hfw2230s-s-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "A938A132-CD35-42D8-A359-F69EB5CF907C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hfw2431t-as-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "DFECF62C-7935-4ABF-BE09-C2FFB2BFFC10", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hfw2431t-as-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "04EBAA98-A8EA-4B34-AE18-E159EF7F2407", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hfw2431t-zs-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "917E6ED4-7B78-4724-BD57-52A0C7A3E37B", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hfw2431t-zs-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "E6416818-54D3-4EF0-A635-DE4D14E3721E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hfw2431t-zas-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D4D24218-651C-4F08-B7B0-A5BB2067A3E7", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hfw2431t-zas-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "BAC0FFE5-9039-48AC-ABA9-6A60BC08D8B8", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hfw2431s-s-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EB1F2D8C-8DC0-4598-A0D5-2FD81E4C0F25", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hfw2431s-s-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "14316C52-D598-48D6-83DD-4BDC09B40B6C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hfw2531t-as-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1E89D7E9-C67F-4514-B901-8D357EF27E57", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hfw2531t-as-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "93792C46-D2EB-45E9-87D9-CA2ABC2C0FD4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hfw2531t-zs-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4D4F4709-68F6-4970-A98A-174FB2DA8D7F", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hfw2531t-zs-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "38CC5CD7-C84E-432E-B899-8DE9D7C88DBF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hfw2531t-zas-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "78C7E8E1-DAB1-4646-A375-6B8B6AD92118", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hfw2531t-zas-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "455A3C1E-F89F-405C-A8A8-3F726DC3D8E3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hfw2531s-s-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "26B5216C-DE03-4A57-9793-914E2DC1690B", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hfw2531s-s-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "AD0FBFD4-48BD-40D4-B001-25F629DB3DB9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hfw2831t-as-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "ED62ABE0-14ED-46BE-B663-1B7EF7562527", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hfw2831t-as-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "77601790-A970-470B-8F19-B3B240C93CC0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hfw2831t-zs-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "199EC4C8-8634-43BC-B3CC-9FED500F5A98", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hfw2831t-zs-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "6F301148-0026-4D64-89BD-8DD36D70AF7F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hfw2831t-zas-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8E43EC67-9451-4A7E-9F72-B84B924331B6", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hfw2831t-zas-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "3D22E1AE-01AD-43EE-B9A8-CE2B32DE1819", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hfw2831s-s-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D017BEAA-DB78-4A1C-A78B-6631A6AD4588", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hfw2831s-s-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "E908BEA7-A7C1-48C6-9991-9BA9EB0F2920", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hfw2439m-as-led-b-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1B43845D-D1FB-4CB7-81D7-E02F5672A201", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hfw2439m-as-led-b-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "88C84E4C-5652-4177-B19D-3F85F6BB7B15", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hfw2239m-as-led-b-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2179D498-68E9-4F2F-A0DE-1AAC5B5C0590", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hfw2239m-as-led-b-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "1FFE18FA-F8E1-401E-B867-8415CB16469C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hfw2439s-sa-led-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E59C28BD-2D7A-4A3F-876A-F4B89FABD0C4", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hfw2439s-sa-led-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "3C7C6489-A37F-4CB8-A0D1-1070CEA50DF1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:ipc-hfw2239s-sa-led-s2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7A2B2F74-CC5C-4930-883A-59387633BBFF", "versionEndExcluding": "2022-04", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:ipc-hfw2239s-sa-led-s2:-:*:*:*:*:*:*:*", "matchCriteriaId": "A088EE14-18A7-400D-A97F-2D37165241F9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:asi7213x-t1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "944B9FEB-944F-4D18-9AB8-E208B4ED8D09", "versionEndExcluding": "2021-09", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:asi7213x-t1:-:*:*:*:*:*:*:*", "matchCriteriaId": "61A21D72-F158-4A0D-9B47-F51583F953FC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:asi7223x-a-t1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D48A9CDB-92BB-46B3-998E-10159C71DEF6", "versionEndExcluding": "2021-09", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:asi7223x-a-t1:-:*:*:*:*:*:*:*", "matchCriteriaId": "B619AF87-B6B1-4470-BB67-83E2CCFD22AD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:asi7223x-a_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FF4EFA0E-6636-4CAD-80C0-501D97DEDA43", "versionEndExcluding": "2021-09", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:asi7223x-a:-:*:*:*:*:*:*:*", "matchCriteriaId": "8F444CEE-EE2A-4AAC-A89F-65F72F7EC0D9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dahuasecurity:asi7213x_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0506B29B-78D7-4347-991C-516C38C62ED5", "versionEndExcluding": "2021-09", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:dahuasecurity:asi7213x:-:*:*:*:*:*:*:*", "matchCriteriaId": "D4C15C01-8DFC-4036-AF76-1B1608E75523", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "If the user enables the https function on the device, an attacker can modify the user\u2019s request data packet through a man-in-the-middle attack ,Injection of a malicious URL in the Host: header of the HTTP Request results in a 302 redirect to an attacker-controlled page."}, {"lang": "es", "value": "Si el usuario habilita la funci\u00f3n https en el dispositivo, un atacante puede modificar el paquete de datos de petici\u00f3n del usuario mediante un ataque de tipo man-in-the-middle , Una inyecci\u00f3n de una URL maliciosa en el encabezado Host: de la petici\u00f3n HTTP resulta en un redireccionamiento 302 a una p\u00e1gina controlada por el atacante"}], "id": "CVE-2022-30562", "lastModified": "2022-07-13T17:40:03.647", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "HIGH", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 4.9, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-06-28T14:15:08.180", "references": [{"source": "cybersecurity@dahuatech.com", "tags": ["Vendor Advisory"], "url": "https://www.dahuasecurity.com/support/cybersecurity/details/1017"}], "sourceIdentifier": "cybersecurity@dahuatech.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-601"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}