CVE-2022-30564

Medium

Description

Some Dahua embedded products have a vulnerability of unauthorized modification of the device timestamp. By sending a specially crafted packet to the vulnerable interface, an attacker can modify the device system time.

SeverityMedium
CVSS5.3
Exploit probability—
ProductDahuasecurity Ipc-hf71242f-z-x Firmware
PublishedFeb 9, 2023
First seenFeb 9, 2023

How to fix

Update
  • dahuasecurity ipc-hf71242f-z-x_firmware2.800.0000000.4.r.210708 or later
  • dahuasecurity ipc-hf7442f-z-x_firmware2.800.0000000.4.r.210708 or later
  • dahuasecurity ipc-hf7842f-z-x_firmware2.800.0000000.4.r.210708 or later
  • dahuasecurity ipc-hf5241f-ze_firmware2.840.0000000.18.r.220629 or later
  • dahuasecurity ipc-hf5442f-ze_firmware2.840.0000000.18.r.220629 or later
  • dahuasecurity ipc-hf5541f-ze_firmware2.840.0000000.18.r.220629 or later
  • dahuasecurity ipc-hf5842f-ze_firmware2.840.0000000.18.r.220629 or later
  • dahuasecurity sd5a225gb-hnr_firmware2.812.0000032.2.r.220804 or later
  • dahuasecurity sd5a225gb-hnr-sl_firmware2.812.0000032.2.r.220804 or later
  • dahuasecurity sd5a225xa-hnr_firmware2.812.0000032.2.r.220804 or later
  • dahuasecurity sd5a225xa-hnr-sl_firmware2.812.0000032.2.r.220804 or later
  • dahuasecurity sd5a232gb-hnr_firmware2.812.0000032.2.r.220804 or later

Affected products

ProductAffected versionsFixed in
dahuasecurity ipc-hf71242f-z-x_firmwarev < 2.800.0000000.4.r.2107082.800.0000000.4.r.210708
dahuasecurity ipc-hf7442f-z-x_firmwarev < 2.800.0000000.4.r.2107082.800.0000000.4.r.210708
dahuasecurity ipc-hf7842f-z-x_firmwarev < 2.800.0000000.4.r.2107082.800.0000000.4.r.210708
dahuasecurity ipc-hf5241f-ze_firmwarev < 2.840.0000000.18.r.2206292.840.0000000.18.r.220629
dahuasecurity ipc-hf5442f-ze_firmwarev < 2.840.0000000.18.r.2206292.840.0000000.18.r.220629
dahuasecurity ipc-hf5541f-ze_firmwarev < 2.840.0000000.18.r.2206292.840.0000000.18.r.220629
dahuasecurity ipc-hf5842f-ze_firmwarev < 2.840.0000000.18.r.2206292.840.0000000.18.r.220629
dahuasecurity sd5a225gb-hnr_firmwarev < 2.812.0000032.2.r.2208042.812.0000032.2.r.220804
dahuasecurity sd5a225gb-hnr-sl_firmwarev < 2.812.0000032.2.r.2208042.812.0000032.2.r.220804
dahuasecurity sd5a225xa-hnr_firmwarev < 2.812.0000032.2.r.2208042.812.0000032.2.r.220804
dahuasecurity sd5a225xa-hnr-sl_firmwarev < 2.812.0000032.2.r.2208042.812.0000032.2.r.220804
dahuasecurity sd5a232gb-hnr_firmwarev < 2.812.0000032.2.r.2208042.812.0000032.2.r.220804
dahuasecurity sd5a232xb-hnr_firmwarev < 2.812.0000032.2.r.2208042.812.0000032.2.r.220804
dahuasecurity sd5a232xb-hnr-ac_firmwarev < 2.812.0000032.2.r.2208042.812.0000032.2.r.220804
dahuasecurity sd5a232xb-hnr-p_firmwarev < 2.812.0000032.2.r.2208042.812.0000032.2.r.220804
dahuasecurity sd5a245gb-hnr_firmwarev < 2.812.0000032.2.r.2208042.812.0000032.2.r.220804
dahuasecurity sd5a245xa-hnr_firmwarev < 2.812.0000032.2.r.2208042.812.0000032.2.r.220804
dahuasecurity sd5a425ga-hnr_firmwarev < 2.812.0000032.2.r.2208042.812.0000032.2.r.220804
dahuasecurity sd5a425xa-hnr_firmwarev < 2.812.0000032.2.r.2208042.812.0000032.2.r.220804
dahuasecurity sd5a432gb-hnr_firmwarev < 2.812.0000032.2.r.2208042.812.0000032.2.r.220804
dahuasecurity sd5a445gb-hnr_firmwarev < 2.812.0000032.2.r.2208042.812.0000032.2.r.220804
dahuasecurity sd5a445xa-hnr_firmwarev < 2.812.0000032.2.r.2208042.812.0000032.2.r.220804
dahuasecurity sd5a445xa-hnr-1t_firmwarev < 2.812.0000032.2.r.2208042.812.0000032.2.r.220804
dahuasecurity sd5a825-hnr-ya_firmwarev < 2.812.0000032.2.r.2208042.812.0000032.2.r.220804
dahuasecurity sd5a825ga-hnr_firmwarev < 2.812.0000032.2.r.2208042.812.0000032.2.r.220804
dahuasecurity sd22204-gc-lb_firmwarev < 2.813.0000017.0.r.2209282.813.0000017.0.r.220928
dahuasecurity sd22204db-gny_firmwarev < 2.813.0000017.0.r.2209282.813.0000017.0.r.220928
dahuasecurity sd22204db-gny-w_firmwarev < 2.813.0000017.0.r.2209282.813.0000017.0.r.220928
dahuasecurity sd22204t-gn-s2_firmwarev < 2.813.0000017.0.r.2209282.813.0000017.0.r.220928
dahuasecurity sd22204ue-gn_firmwarev < 2.813.0000017.0.r.2209282.813.0000017.0.r.220928
dahuasecurity sd22204ue-gn-w_firmwarev < 2.813.0000017.0.r.2209282.813.0000017.0.r.220928
dahuasecurity sd22404t-gn_firmwarev < 2.813.0000017.0.r.2209282.813.0000017.0.r.220928
dahuasecurity sd22404t-gn-w_firmwarev < 2.813.0000017.0.r.2209282.813.0000017.0.r.220928
dahuasecurity sd59131i-hc\(-s3\)_firmwarev < 2.812.0000017.0.r.2209282.812.0000017.0.r.220928
dahuasecurity sd59225-hc-la_firmwarev < 2.812.0000017.0.r.2209282.812.0000017.0.r.220928
dahuasecurity sd59225i-hc\(-s3\)_firmwarev < 2.812.0000017.0.r.2209282.812.0000017.0.r.220928
dahuasecurity sd59225u-hni_firmwarev < 2.812.0000017.0.r.2209282.812.0000017.0.r.220928
dahuasecurity sd59230i-hc\(-s3\)_firmwarev < 2.812.0000017.0.r.2209282.812.0000017.0.r.220928
dahuasecurity sd59232-hc-la_firmwarev < 2.812.0000017.0.r.2209282.812.0000017.0.r.220928
dahuasecurity sd59232xa-hnr_firmwarev < 2.812.0000017.0.r.2209282.812.0000017.0.r.220928
dahuasecurity sd59430i-hc_firmwarev < 2.812.0000017.0.r.2209282.812.0000017.0.r.220928
dahuasecurity sd59432xa-hnr_firmwarev < 2.812.0000017.0.r.2209282.812.0000017.0.r.220928
dahuasecurity nvr4216-i_firmwarev < 4.002.0000000.3.r.2211224.002.0000000.3.r.221122
dahuasecurity nvr4416-16p-4ks2\/i_firmwarev < 4.002.0000000.3.r.2211224.002.0000000.3.r.221122
dahuasecurity nvr4416-4ks2\/i_firmwarev < 4.002.0000000.3.r.2211224.002.0000000.3.r.221122
dahuasecurity nvr4432-16p-4ks2\/i_firmwarev < 4.002.0000000.3.r.2211224.002.0000000.3.r.221122
dahuasecurity nvr4432-4ks2\/i_firmwarev < 4.002.0000000.3.r.2211224.002.0000000.3.r.221122
dahuasecurity nvr4432-i_firmwarev < 4.002.0000000.3.r.2211224.002.0000000.3.r.221122
dahuasecurity nvr4816-16p-4ks2\/i_firmwarev < 4.002.0000000.3.r.2211224.002.0000000.3.r.221122
dahuasecurity nvr4816-4ks2\/i_firmwarev < 4.002.0000000.3.r.2211224.002.0000000.3.r.221122
dahuasecurity nvr4832-16p-4ks2\/i_firmwarev < 4.002.0000000.3.r.2211224.002.0000000.3.r.221122
dahuasecurity nvr4832-4ks2\/i_firmwarev < 4.002.0000000.3.r.2211224.002.0000000.3.r.221122
dahuasecurity nvr4832-i_firmwarev < 4.002.0000000.3.r.2211224.002.0000000.3.r.221122
dahuasecurity nvr5216-16p-i\/l_firmwarev < 4.002.0000000.3.r.2211224.002.0000000.3.r.221122
dahuasecurity nvr5216-8p-i\/l_firmwarev < 4.002.0000000.3.r.2211224.002.0000000.3.r.221122
dahuasecurity nvr5432-16p-i\/l_firmwarev < 4.002.0000000.3.r.2211224.002.0000000.3.r.221122
dahuasecurity nvr5832-i\/l_firmwarev < 4.002.0000000.3.r.2211224.002.0000000.3.r.221122
dahuasecurity nvr5832\/5864-i_firmwarev < 4.002.0000000.3.r.2211224.002.0000000.3.r.221122
dahuasecurity nvr5864-i\/l_firmwarev < 4.002.0000000.3.r.2211224.002.0000000.3.r.221122
dahuasecurity nvr2104-i_firmwarev < 4.002.0000000.3.r.2211224.002.0000000.3.r.221122
dahuasecurity nvr2104hs-i_firmwarev < 4.002.0000000.3.r.2211224.002.0000000.3.r.221122
dahuasecurity nvr2108-i_firmwarev < 4.002.0000000.3.r.2211224.002.0000000.3.r.221122
dahuasecurity nvr2108hs-i_firmwarev < 4.002.0000000.3.r.2211224.002.0000000.3.r.221122
dahuasecurity nvr2116-i_firmwarev < 4.002.0000000.3.r.2211224.002.0000000.3.r.221122
dahuasecurity nvr2116hs-i_firmwarev < 4.002.0000000.3.r.2211224.002.0000000.3.r.221122
dahuasecurity nvr2204-i_firmwarev < 4.002.0000000.3.r.2211224.002.0000000.3.r.221122
dahuasecurity nvr2208-i_firmwarev < 4.002.0000000.3.r.2211224.002.0000000.3.r.221122
dahuasecurity nvr2216-i_firmwarev < 4.002.0000000.3.r.2211224.002.0000000.3.r.221122
dahuasecurity xvr5104h-i2_firmwarev < 4.001.0000003.3.r.2211244.001.0000003.3.r.221124
dahuasecurity xvr5104he-i2_firmwarev < 4.001.0000003.3.r.2211244.001.0000003.3.r.221124
dahuasecurity xvr5104hs-i2_firmwarev < 4.001.0000003.3.r.2211244.001.0000003.3.r.221124
dahuasecurity xvr5108he-i2_firmwarev < 4.001.0000003.3.r.2211244.001.0000003.3.r.221124
dahuasecurity xvr5108hs-i2_firmwarev < 4.001.0000003.3.r.2211244.001.0000003.3.r.221124
dahuasecurity xvr5116h-i2_firmwarev < 4.001.0000005.1.r.2211234.001.0000005.1.r.221123
dahuasecurity xvr5108h-i2_firmwarev < 4.001.0000003.3.r.2211244.001.0000003.3.r.221124
dahuasecurity xvr5116he-i2_firmwarev < 4.001.0000005.1.r.2211234.001.0000005.1.r.221123
dahuasecurity xvr5116hs-i2_firmwarev < 4.001.0000005.1.r.2211234.001.0000005.1.r.221123
dahuasecurity xvr5216a-i2_firmwarev < 4.001.0000005.1.r.2211234.001.0000005.1.r.221123
dahuasecurity xvr5216an-i2_firmwarev < 4.001.0000005.1.r.2211234.001.0000005.1.r.221123
dahuasecurity xvr5232an-i2_firmwarev < 4.001.0000003.3.r.2211244.001.0000003.3.r.221124
dahuasecurity xvr5408l-i2_firmwarev < 4.001.0000003.3.r.2211244.001.0000003.3.r.221124
dahuasecurity xvr5416l-i2_firmwarev < 4.001.0000005.1.r.2211234.001.0000005.1.r.221123
dahuasecurity xvr5432l-i2_firmwarev < 4.001.0000003.3.r.2211244.001.0000003.3.r.221124
dahuasecurity xvr5808s-i2_firmwarev < 4.001.0000003.3.r.2211244.001.0000003.3.r.221124
dahuasecurity xvr5816s-i2_firmwarev < 4.001.0000005.1.r.2211234.001.0000005.1.r.221123
dahuasecurity xvr5832s-i2_firmwarev < 4.001.0000003.3.r.2211244.001.0000003.3.r.221124
dahuasecurity xvr4104c-x_firmwarev < 4.001.0000000.16.r.2211244.001.0000000.16.r.221124
dahuasecurity xvr4104hs-x_firmwarev < 4.001.0000000.16.r.2211244.001.0000000.16.r.221124
dahuasecurity xvr4108c-x_firmwarev < 4.001.0000000.16.r.2211244.001.0000000.16.r.221124
dahuasecurity xvr4108hs-x_firmwarev < 4.001.0000000.16.r.2211244.001.0000000.16.r.221124
dahuasecurity xvr4116hs-x_firmwarev < 4.001.0000000.16.r.2211244.001.0000000.16.r.221124
dahuasecurity xvr5108c-x_firmwarev < 4.001.0000000.16.r.2211244.001.0000000.16.r.221124
dahuasecurity xvr5216a-x_firmwarev < 4.001.0000000.16.r.2211244.001.0000000.16.r.221124
dahuasecurity xvr5216an-x_firmwarev < 4.001.0000000.16.r.2211244.001.0000000.16.r.221124
dahuasecurity xvr5232an-x_firmwarev < 4.001.0000000.16.r.2211244.001.0000000.16.r.221124
dahuasecurity xvr5432l-x_firmwarev < 4.001.0000000.16.r.2211244.001.0000000.16.r.221124
dahuasecurity xvr5832s-x_firmwarev < 4.001.0000000.16.r.2211244.001.0000000.16.r.221124

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2022-30564 · Dahuasecurity Ipc-hf71242f-z-x Firmware · Dark Radar