What’s Vulnerable › Vulnerabilities

CVE-2022-30562

• Severity: medium (CVSS 4.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-06-28 · updated 2026-06-17
• Weakness: CWE-601

Description

If the user enables the https function on the device, an attacker can modify the user’s request data packet through a man-in-the-middle attack ,Injection of a malicious URL in the Host: header of the HTTP Request results in a 302 redirect to an attacker-controlled page.

Affected products

• Dahuasecurity Asi7213X-T1 Firmware: before 2021-09 — fixed in 2021-09
• Dahuasecurity Asi7213X Firmware: before 2021-09 — fixed in 2021-09
• Dahuasecurity Asi7223X-A-T1 Firmware: before 2021-09 — fixed in 2021-09
• Dahuasecurity Asi7223X-A Firmware: before 2021-09 — fixed in 2021-09
• Dahuasecurity Ipc-Hdbw2230E-S-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hdbw2231E-S-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hdbw2231F-As-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hdbw2231R-Zas-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hdbw2231R-Zs-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hdbw2431E-S-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hdbw2431R-Zas-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hdbw2431R-Zs-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hdbw2531E-S-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hdbw2531R-Zas-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hdbw2531R-Zs-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hdbw2831E-S-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hdbw2831R-Zas-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hdbw2831R-Zs-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hfw2230S-S-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hfw2231M-As-I2-B-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hfw2231S-S-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hfw2231T-As-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hfw2231T-Zas-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hfw2231T-Zs-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hfw2239M-As-Led-B-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hfw2239S-Sa-Led-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hfw2431S-S-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hfw2431T-As-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hfw2431T-Zas-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hfw2431T-Zs-S2 Firmware: before 2022-04 — fixed in 2022-04

How to fix

Upgrade to a fixed version: Dahuasecurity Asi7213X-T1 Firmware 2021-09; Dahuasecurity Asi7213X Firmware 2021-09; Dahuasecurity Asi7223X-A-T1 Firmware 2021-09; Dahuasecurity Asi7223X-A Firmware 2021-09; Dahuasecurity Ipc-Hdbw2230E-S-S2 Firmware 2022-04; Dahuasecurity Ipc-Hdbw2231E-S-S2 Firmware 2022-04; Dahuasecurity Ipc-Hdbw2231F-As-S2 Firmware 2022-04; Dahuasecurity Ipc-Hdbw2231R-Zas-S2 Firmware 2022-04; Dahuasecurity Ipc-Hdbw2231R-Zs-S2 Firmware 2022-04; Dahuasecurity Ipc-Hdbw2431E-S-S2 Firmware 2022-04; Dahuasecurity Ipc-Hdbw2431R-Zas-S2 Firmware 2022-04; Dahuasecurity Ipc-Hdbw2431R-Zs-S2 Firmware 2022-04. Check the vendor advisory for mitigations.

References

• https://www.dahuasecurity.com/support/cybersecurity/details/1017
• https://www.dahuasecurity.com/support/cybersecurity/details/1017

Get alerted when CVE-2022-30562 or the next vulnerability affects your stack