CVE-2022-30564

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-02-09 · updated 2026-06-17
Weakness: CWE-284

Description

Some Dahua embedded products have a vulnerability of unauthorized modification of the device timestamp. By sending a specially crafted packet to the vulnerable interface, an attacker can modify the device system time.

Affected products

Dahuasecurity Ipc-Hf5241F-Ze Firmware: before 2.840.0000000.18.r.220629 — fixed in 2.840.0000000.18.r.220629
Dahuasecurity Ipc-Hf5442F-Ze Firmware: before 2.840.0000000.18.r.220629 — fixed in 2.840.0000000.18.r.220629
Dahuasecurity Ipc-Hf5541F-Ze Firmware: before 2.840.0000000.18.r.220629 — fixed in 2.840.0000000.18.r.220629
Dahuasecurity Ipc-Hf5842F-Ze Firmware: before 2.840.0000000.18.r.220629 — fixed in 2.840.0000000.18.r.220629
Dahuasecurity Ipc-Hf71242F-Z-X Firmware: before 2.800.0000000.4.r.210708 — fixed in 2.800.0000000.4.r.210708
Dahuasecurity Ipc-Hf7442F-Z-X Firmware: before 2.800.0000000.4.r.210708 — fixed in 2.800.0000000.4.r.210708
Dahuasecurity Ipc-Hf7842F-Z-X Firmware: before 2.800.0000000.4.r.210708 — fixed in 2.800.0000000.4.r.210708
Dahuasecurity Nvr2104-I Firmware: before 4.002.0000000.3.r.221122 — fixed in 4.002.0000000.3.r.221122
Dahuasecurity Nvr2104Hs-I Firmware: before 4.002.0000000.3.r.221122 — fixed in 4.002.0000000.3.r.221122
Dahuasecurity Nvr2108-I Firmware: before 4.002.0000000.3.r.221122 — fixed in 4.002.0000000.3.r.221122
Dahuasecurity Nvr2108Hs-I Firmware: before 4.002.0000000.3.r.221122 — fixed in 4.002.0000000.3.r.221122
Dahuasecurity Nvr2116-I Firmware: before 4.002.0000000.3.r.221122 — fixed in 4.002.0000000.3.r.221122
Dahuasecurity Nvr2116Hs-I Firmware: before 4.002.0000000.3.r.221122 — fixed in 4.002.0000000.3.r.221122
Dahuasecurity Nvr2204-I Firmware: before 4.002.0000000.3.r.221122 — fixed in 4.002.0000000.3.r.221122
Dahuasecurity Nvr2208-I Firmware: before 4.002.0000000.3.r.221122 — fixed in 4.002.0000000.3.r.221122
Dahuasecurity Nvr2216-I Firmware: before 4.002.0000000.3.r.221122 — fixed in 4.002.0000000.3.r.221122
Dahuasecurity Nvr4216-I Firmware: before 4.002.0000000.3.r.221122 — fixed in 4.002.0000000.3.r.221122
Dahuasecurity Nvr4416-16P-4Ks2/I Firmware: before 4.002.0000000.3.r.221122 — fixed in 4.002.0000000.3.r.221122
Dahuasecurity Nvr4416-4Ks2/I Firmware: before 4.002.0000000.3.r.221122 — fixed in 4.002.0000000.3.r.221122
Dahuasecurity Nvr4432-16P-4Ks2/I Firmware: before 4.002.0000000.3.r.221122 — fixed in 4.002.0000000.3.r.221122
Dahuasecurity Nvr4432-4Ks2/I Firmware: before 4.002.0000000.3.r.221122 — fixed in 4.002.0000000.3.r.221122
Dahuasecurity Nvr4432-I Firmware: before 4.002.0000000.3.r.221122 — fixed in 4.002.0000000.3.r.221122
Dahuasecurity Nvr4816-16P-4Ks2/I Firmware: before 4.002.0000000.3.r.221122 — fixed in 4.002.0000000.3.r.221122
Dahuasecurity Nvr4816-4Ks2/I Firmware: before 4.002.0000000.3.r.221122 — fixed in 4.002.0000000.3.r.221122
Dahuasecurity Nvr4832-16P-4Ks2/I Firmware: before 4.002.0000000.3.r.221122 — fixed in 4.002.0000000.3.r.221122
Dahuasecurity Nvr4832-4Ks2/I Firmware: before 4.002.0000000.3.r.221122 — fixed in 4.002.0000000.3.r.221122
Dahuasecurity Nvr4832-I Firmware: before 4.002.0000000.3.r.221122 — fixed in 4.002.0000000.3.r.221122
Dahuasecurity Nvr5216-16P-I/L Firmware: before 4.002.0000000.3.r.221122 — fixed in 4.002.0000000.3.r.221122
Dahuasecurity Nvr5216-8P-I/L Firmware: before 4.002.0000000.3.r.221122 — fixed in 4.002.0000000.3.r.221122
Dahuasecurity Nvr5432-16P-I/L Firmware: before 4.002.0000000.3.r.221122 — fixed in 4.002.0000000.3.r.221122

How to fix

Upgrade to a fixed version: Dahuasecurity Ipc-Hf5241F-Ze Firmware 2.840.0000000.18.r.220629; Dahuasecurity Ipc-Hf5442F-Ze Firmware 2.840.0000000.18.r.220629; Dahuasecurity Ipc-Hf5541F-Ze Firmware 2.840.0000000.18.r.220629; Dahuasecurity Ipc-Hf5842F-Ze Firmware 2.840.0000000.18.r.220629; Dahuasecurity Ipc-Hf71242F-Z-X Firmware 2.800.0000000.4.r.210708; Dahuasecurity Ipc-Hf7442F-Z-X Firmware 2.800.0000000.4.r.210708; Dahuasecurity Ipc-Hf7842F-Z-X Firmware 2.800.0000000.4.r.210708; Dahuasecurity Nvr2104-I Firmware 4.002.0000000.3.r.221122; Dahuasecurity Nvr2104Hs-I Firmware 4.002.0000000.3.r.221122; Dahuasecurity Nvr2108-I Firmware 4.002.0000000.3.r.221122; Dahuasecurity Nvr2108Hs-I Firmware 4.002.0000000.3.r.221122; Dahuasecurity Nvr2116-I Firmware 4.002.0000000.3.r.221122. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-30564 or the next vulnerability affects your stack