CVE:CVE-2022-45425
CNNVD:CNNVD-202212-3994
Dahua software products是中国大华（Dahua）公司的一系列应用程序。
若干Dahua软件产品存在安全漏洞，该漏洞源于其使用硬编码加密密钥允许攻击者获得AES加密密钥。
solution:Upgrade dahuasecurity dss_express to a higher version than 7.002.1760000.2,8.0.2,8.0.4,8.1,8.1.1,and avoid the version 7.002.1760000.2,8.0.2,8.0.4,8.1,8.1.1; Upgrade dahuasecurity dss_professional to a higher version than 7.002.1760000.2,8.0.2,8.0.4,8.1,8.1.1,and avoid the version 7.002.1760000.2,8.0.2,8.0.4,8.1,8.1.1; Upgrade dahuasecurity dhi-dss7016d-s2_firmware to a higher version than 1.001.0000001.2,8.0.2,8.0.4,8.1,and avoid the version 1.001.0000001.2,8.0.2,8.0.4,8.1; Upgrade dahuasecurity dhi-dss7016dr-s2_firmware to a higher version than 1.001.0000001.2,8.0.2,8.0.4,8.1,and avoid the version 1.001.0000001.2,8.0.2,8.0.4,8.1; Upgrade dahuasecurity dhi-dss4004-s2_firmware to a higher version than 1.001.0000001.2,8.0.2,8.0.4,8.1,and avoid the version 1.001.0000001.2,8.0.2,8.0.4,8.1