CVE-2022-30561

Severity: medium (CVSS 5.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-06-28 · updated 2026-06-17

Description

When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in, the attacker could log in to the device by replaying the user's login packet.

Affected products

Dahuasecurity Asi7213X-T1 Firmware: before 2021-09 — fixed in 2021-09
Dahuasecurity Asi7213X Firmware: before 2021-09 — fixed in 2021-09
Dahuasecurity Asi7223X-A-T1 Firmware: before 2021-09 — fixed in 2021-09
Dahuasecurity Asi7223X-A Firmware: before 2021-09 — fixed in 2021-09
Dahuasecurity Ipc-Hdbw2230E-S-S2 Firmware: before 2022-04 — fixed in 2022-04
Dahuasecurity Ipc-Hdbw2231E-S-S2 Firmware: before 2022-04 — fixed in 2022-04
Dahuasecurity Ipc-Hdbw2231F-As-S2 Firmware: before 2022-04 — fixed in 2022-04
Dahuasecurity Ipc-Hdbw2231R-Zas-S2 Firmware: before 2022-04 — fixed in 2022-04
Dahuasecurity Ipc-Hdbw2231R-Zs-S2 Firmware: before 2022-04 — fixed in 2022-04
Dahuasecurity Ipc-Hdbw2431E-S-S2 Firmware: before 2022-04 — fixed in 2022-04
Dahuasecurity Ipc-Hdbw2431R-Zas-S2 Firmware: before 2022-04 — fixed in 2022-04
Dahuasecurity Ipc-Hdbw2431R-Zs-S2 Firmware: before 2022-04 — fixed in 2022-04
Dahuasecurity Ipc-Hdbw2531E-S-S2 Firmware: before 2022-04 — fixed in 2022-04
Dahuasecurity Ipc-Hdbw2531R-Zas-S2 Firmware: before 2022-04 — fixed in 2022-04
Dahuasecurity Ipc-Hdbw2531R-Zs-S2 Firmware: before 2022-04 — fixed in 2022-04
Dahuasecurity Ipc-Hdbw2831E-S-S2 Firmware: before 2022-04 — fixed in 2022-04
Dahuasecurity Ipc-Hdbw2831R-Zas-S2 Firmware: before 2022-04 — fixed in 2022-04
Dahuasecurity Ipc-Hdbw2831R-Zs-S2 Firmware: before 2022-04 — fixed in 2022-04
Dahuasecurity Ipc-Hfw2230S-S-S2 Firmware: before 2022-04 — fixed in 2022-04
Dahuasecurity Ipc-Hfw2231M-As-I2-B-S2 Firmware: before 2022-04 — fixed in 2022-04
Dahuasecurity Ipc-Hfw2231S-S-S2 Firmware: before 2022-04 — fixed in 2022-04
Dahuasecurity Ipc-Hfw2231T-As-S2 Firmware: before 2022-04 — fixed in 2022-04
Dahuasecurity Ipc-Hfw2231T-Zas-S2 Firmware: before 2022-04 — fixed in 2022-04
Dahuasecurity Ipc-Hfw2231T-Zs-S2 Firmware: before 2022-04 — fixed in 2022-04
Dahuasecurity Ipc-Hfw2239M-As-Led-B-S2 Firmware: before 2022-04 — fixed in 2022-04
Dahuasecurity Ipc-Hfw2239S-Sa-Led-S2 Firmware: before 2022-04 — fixed in 2022-04
Dahuasecurity Ipc-Hfw2431S-S-S2 Firmware: before 2022-04 — fixed in 2022-04
Dahuasecurity Ipc-Hfw2431T-As-S2 Firmware: before 2022-04 — fixed in 2022-04
Dahuasecurity Ipc-Hfw2431T-Zas-S2 Firmware: before 2022-04 — fixed in 2022-04
Dahuasecurity Ipc-Hfw2431T-Zs-S2 Firmware: before 2022-04 — fixed in 2022-04

How to fix

Upgrade to a fixed version: Dahuasecurity Asi7213X-T1 Firmware 2021-09; Dahuasecurity Asi7213X Firmware 2021-09; Dahuasecurity Asi7223X-A-T1 Firmware 2021-09; Dahuasecurity Asi7223X-A Firmware 2021-09; Dahuasecurity Ipc-Hdbw2230E-S-S2 Firmware 2022-04; Dahuasecurity Ipc-Hdbw2231E-S-S2 Firmware 2022-04; Dahuasecurity Ipc-Hdbw2231F-As-S2 Firmware 2022-04; Dahuasecurity Ipc-Hdbw2231R-Zas-S2 Firmware 2022-04; Dahuasecurity Ipc-Hdbw2231R-Zs-S2 Firmware 2022-04; Dahuasecurity Ipc-Hdbw2431E-S-S2 Firmware 2022-04; Dahuasecurity Ipc-Hdbw2431R-Zas-S2 Firmware 2022-04; Dahuasecurity Ipc-Hdbw2431R-Zs-S2 Firmware 2022-04. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-30561 or the next vulnerability affects your stack