CVE-2022-30562: Dahuasecurity ASI7213X-t1 Firmware

Medium severity, CVSS 4.7. EPSS: 0.7% chance of exploitation in the next 30 days.

If the user enables the https function on the device, an attacker can modify the user’s request data packet through a man-in-the-middle attack ,Injection of a malicious URL in the Host: header of the HTTP Request results in a 302 redirect to an attacker-controlled page.

Affected products

  • Dahuasecurity ASI7213X-t1 Firmware: before 2021-09 (fixed in 2021-09)
  • Dahuasecurity ASI7213X Firmware: before 2021-09 (fixed in 2021-09)
  • Dahuasecurity ASI7223X-A-t1 Firmware: before 2021-09 (fixed in 2021-09)
  • Dahuasecurity ASI7223X-A Firmware: before 2021-09 (fixed in 2021-09)
  • Dahuasecurity Ipc-HDBW2230E-S-s2 Firmware: before 2022-04 (fixed in 2022-04)
  • Dahuasecurity Ipc-HDBW2231E-S-s2 Firmware: before 2022-04 (fixed in 2022-04)
  • Dahuasecurity Ipc-HDBW2231F-As-s2 Firmware: before 2022-04 (fixed in 2022-04)
  • Dahuasecurity Ipc-HDBW2231R-Zas-s2 Firmware: before 2022-04 (fixed in 2022-04)
  • Dahuasecurity Ipc-HDBW2231R-Zs-s2 Firmware: before 2022-04 (fixed in 2022-04)
  • Dahuasecurity Ipc-HDBW2431E-S-s2 Firmware: before 2022-04 (fixed in 2022-04)
  • Dahuasecurity Ipc-HDBW2431R-Zas-s2 Firmware: before 2022-04 (fixed in 2022-04)
  • Dahuasecurity Ipc-HDBW2431R-Zs-s2 Firmware: before 2022-04 (fixed in 2022-04)
  • Dahuasecurity Ipc-HDBW2531E-S-s2 Firmware: before 2022-04 (fixed in 2022-04)
  • Dahuasecurity Ipc-HDBW2531R-Zas-s2 Firmware: before 2022-04 (fixed in 2022-04)
  • Dahuasecurity Ipc-HDBW2531R-Zs-s2 Firmware: before 2022-04 (fixed in 2022-04)
  • Dahuasecurity Ipc-HDBW2831E-S-s2 Firmware: before 2022-04 (fixed in 2022-04)
  • Dahuasecurity Ipc-HDBW2831R-Zas-s2 Firmware: before 2022-04 (fixed in 2022-04)
  • Dahuasecurity Ipc-HDBW2831R-Zs-s2 Firmware: before 2022-04 (fixed in 2022-04)
  • Dahuasecurity Ipc-HFW2230S-S-s2 Firmware: before 2022-04 (fixed in 2022-04)
  • Dahuasecurity Ipc-HFW2231M-As-i2-B-s2 Firmware: before 2022-04 (fixed in 2022-04)
  • Dahuasecurity Ipc-HFW2231S-S-s2 Firmware: before 2022-04 (fixed in 2022-04)
  • Dahuasecurity Ipc-HFW2231T-As-s2 Firmware: before 2022-04 (fixed in 2022-04)
  • Dahuasecurity Ipc-HFW2231T-Zas-s2 Firmware: before 2022-04 (fixed in 2022-04)
  • Dahuasecurity Ipc-HFW2231T-Zs-s2 Firmware: before 2022-04 (fixed in 2022-04)
  • Dahuasecurity Ipc-HFW2239M-As-Led-B-s2 Firmware: before 2022-04 (fixed in 2022-04)
  • and 15 more

Published 2022-06-28. Last modified 2026-06-17.