Security Advisory

CVE-2022-45423

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-12-27 00:00:00
Last updated 2025-04-14 13:00:23
Assigner dahua
CVSS score not scored
State PUBLISHED

Description

Some Dahua software products have a vulnerability of unauthenticated request of MQTT credentials. An attacker can obtain encrypted MQTT credentials by sending a specific crafted packet to the vulnerable interface (the credentials cannot be directly exploited).