What’s Vulnerable › Vulnerabilities

CVE-2022-30563

• Severity: high (CVSS 7.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-06-28 · updated 2026-06-17

Description

When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in through ONVIF, he can log in to the device by replaying the user's login packet.

Affected products

• Dahuasecurity Asi7213X-T1 Firmware: before 2021-09 — fixed in 2021-09
• Dahuasecurity Asi7213X Firmware: before 2021-09 — fixed in 2021-09
• Dahuasecurity Asi7223X-A-T1 Firmware: before 2021-09 — fixed in 2021-09
• Dahuasecurity Asi7223X-A Firmware: before 2021-09 — fixed in 2021-09
• Dahuasecurity Ipc-Hdbw2230E-S-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hdbw2231E-S-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hdbw2231F-As-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hdbw2231R-Zas-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hdbw2231R-Zs-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hdbw2431E-S-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hdbw2431R-Zas-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hdbw2431R-Zs-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hdbw2531E-S-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hdbw2531R-Zas-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hdbw2531R-Zs-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hdbw2831E-S-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hdbw2831R-Zas-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hdbw2831R-Zs-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hfw2230S-S-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hfw2231M-As-I2-B-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hfw2231S-S-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hfw2231T-As-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hfw2231T-Zas-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hfw2231T-Zs-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hfw2239M-As-Led-B-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hfw2239S-Sa-Led-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hfw2431S-S-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hfw2431T-As-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hfw2431T-Zas-S2 Firmware: before 2022-04 — fixed in 2022-04
• Dahuasecurity Ipc-Hfw2431T-Zs-S2 Firmware: before 2022-04 — fixed in 2022-04

How to fix

Upgrade to a fixed version: Dahuasecurity Asi7213X-T1 Firmware 2021-09; Dahuasecurity Asi7213X Firmware 2021-09; Dahuasecurity Asi7223X-A-T1 Firmware 2021-09; Dahuasecurity Asi7223X-A Firmware 2021-09; Dahuasecurity Ipc-Hdbw2230E-S-S2 Firmware 2022-04; Dahuasecurity Ipc-Hdbw2231E-S-S2 Firmware 2022-04; Dahuasecurity Ipc-Hdbw2231F-As-S2 Firmware 2022-04; Dahuasecurity Ipc-Hdbw2231R-Zas-S2 Firmware 2022-04; Dahuasecurity Ipc-Hdbw2231R-Zs-S2 Firmware 2022-04; Dahuasecurity Ipc-Hdbw2431E-S-S2 Firmware 2022-04; Dahuasecurity Ipc-Hdbw2431R-Zas-S2 Firmware 2022-04; Dahuasecurity Ipc-Hdbw2431R-Zs-S2 Firmware 2022-04. Check the vendor advisory for mitigations.

References

• https://www.dahuasecurity.com/support/cybersecurity/details/1017
• https://www.dahuasecurity.com/support/cybersecurity/details/1017

Get alerted when CVE-2022-30563 or the next vulnerability affects your stack