Summary
Successful exploitation of these vulnerabilities could allow unauthorized access, upload malicious files, and cause a denial-of-service condition.
Vulnerabilities 4
-
Unscored —
When an attacker obtaining the administrative account and password, or through a man-in-the-middle attack, the attacker…
-
Unscored —
When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in, the attacker cou…
-
Unscored —
If the user enables the https function on the device, an attacker can modify the user’s request data packet through a m…
-
Unscored —
When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in through ONVIF, he…
Revision history
-
#2
Dahua ASI7213X-T1 (Update A)
-
#1
Dahua ASI7213X-T1 (Update A)
References
-
ICS Advisory ICSA-22-193-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-193-01
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-22-193-01
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf