CVE-2022-30564: Dahuasecurity Ipc-HF5241F-Ze Firmware

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Some Dahua embedded products have a vulnerability of unauthorized modification of the device timestamp. By sending a specially crafted packet to the vulnerable interface, an attacker can modify the device system time.

Affected products

Dahuasecurity Ipc-HF5241F-Ze Firmware: before 2.840.0000000.18.r.220629 (fixed in 2.840.0000000.18.r.220629)
Dahuasecurity Ipc-HF5442F-Ze Firmware: before 2.840.0000000.18.r.220629 (fixed in 2.840.0000000.18.r.220629)
Dahuasecurity Ipc-HF5541F-Ze Firmware: before 2.840.0000000.18.r.220629 (fixed in 2.840.0000000.18.r.220629)
Dahuasecurity Ipc-HF5842F-Ze Firmware: before 2.840.0000000.18.r.220629 (fixed in 2.840.0000000.18.r.220629)
Dahuasecurity Ipc-HF71242F-Z-X Firmware: before 2.800.0000000.4.r.210708 (fixed in 2.800.0000000.4.r.210708)
Dahuasecurity Ipc-HF7442F-Z-X Firmware: before 2.800.0000000.4.r.210708 (fixed in 2.800.0000000.4.r.210708)
Dahuasecurity Ipc-HF7842F-Z-X Firmware: before 2.800.0000000.4.r.210708 (fixed in 2.800.0000000.4.r.210708)
Dahuasecurity NVR2104-I Firmware: before 4.002.0000000.3.r.221122 (fixed in 4.002.0000000.3.r.221122)
Dahuasecurity NVR2104HS-I Firmware: before 4.002.0000000.3.r.221122 (fixed in 4.002.0000000.3.r.221122)
Dahuasecurity NVR2108-I Firmware: before 4.002.0000000.3.r.221122 (fixed in 4.002.0000000.3.r.221122)
Dahuasecurity NVR2108HS-I Firmware: before 4.002.0000000.3.r.221122 (fixed in 4.002.0000000.3.r.221122)
Dahuasecurity NVR2116-I Firmware: before 4.002.0000000.3.r.221122 (fixed in 4.002.0000000.3.r.221122)
Dahuasecurity NVR2116HS-I Firmware: before 4.002.0000000.3.r.221122 (fixed in 4.002.0000000.3.r.221122)
Dahuasecurity NVR2204-I Firmware: before 4.002.0000000.3.r.221122 (fixed in 4.002.0000000.3.r.221122)
Dahuasecurity NVR2208-I Firmware: before 4.002.0000000.3.r.221122 (fixed in 4.002.0000000.3.r.221122)
Dahuasecurity NVR2216-I Firmware: before 4.002.0000000.3.r.221122 (fixed in 4.002.0000000.3.r.221122)
Dahuasecurity NVR4216-I Firmware: before 4.002.0000000.3.r.221122 (fixed in 4.002.0000000.3.r.221122)
Dahuasecurity NVR4416-16p-4ks2/i Firmware: before 4.002.0000000.3.r.221122 (fixed in 4.002.0000000.3.r.221122)
Dahuasecurity NVR4416-4ks2/i Firmware: before 4.002.0000000.3.r.221122 (fixed in 4.002.0000000.3.r.221122)
Dahuasecurity NVR4432-16p-4ks2/i Firmware: before 4.002.0000000.3.r.221122 (fixed in 4.002.0000000.3.r.221122)
Dahuasecurity NVR4432-4ks2/i Firmware: before 4.002.0000000.3.r.221122 (fixed in 4.002.0000000.3.r.221122)
Dahuasecurity NVR4432-I Firmware: before 4.002.0000000.3.r.221122 (fixed in 4.002.0000000.3.r.221122)
Dahuasecurity NVR4816-16p-4ks2/i Firmware: before 4.002.0000000.3.r.221122 (fixed in 4.002.0000000.3.r.221122)
Dahuasecurity NVR4816-4ks2/i Firmware: before 4.002.0000000.3.r.221122 (fixed in 4.002.0000000.3.r.221122)
Dahuasecurity NVR4832-16p-4ks2/i Firmware: before 4.002.0000000.3.r.221122 (fixed in 4.002.0000000.3.r.221122)
and 72 more

Published 2023-02-09. Last modified 2026-06-17.