Description
When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in through ONVIF, he can log in to the device by replaying the user's login packet.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | IPCHDBW2XXX[IPCHFW2XXX[ASI7XXXX | Versions which Build time before April, 2022 | — |
Advisories 1
- ICSA-22-193-01 Dahua ASI7213X-T1 (Update A) CISA ICS & IT advisories · Jul 19, 2022