CVE:CVE-2022-45424
CNNVD:CNNVD-202212-3997
Dahua software products是中国大华（Dahua）公司的一系列应用程序。
若干Dahua软件产品存在安全漏洞，该漏洞源于其未经认证的AES加密密钥请求允许攻击者通过向易受攻击的接口发送特定的精心制作的数据包来获得AES加密密钥。
solution:Upgrade dahuasecurity dss_express to a higher version than 7.002.1760000.2,8.0.2,8.0.4,8.1,8.1.1,and avoid the version 7.002.1760000.2,8.0.2,8.0.4,8.1,8.1.1; Upgrade dahuasecurity dss_professional to a higher version than 7.002.1760000.2,8.0.2,8.0.4,8.1,8.1.1,and avoid the version 7.002.1760000.2,8.0.2,8.0.4,8.1,8.1.1; Upgrade dahuasecurity dhi-dss7016d-s2_firmware to a higher version than 1.001.0000001.2,8.0.2,8.0.4,8.1,and avoid the version 1.001.0000001.2,8.0.2,8.0.4,8.1; Upgrade dahuasecurity dhi-dss7016dr-s2_firmware to a higher version than 1.001.0000001.2,8.0.2,8.0.4,8.1,and avoid the version 1.001.0000001.2,8.0.2,8.0.4,8.1; Upgrade dahuasecurity dhi-dss4004-s2_firmware to a higher version than 1.001.0000001.2,8.0.2,8.0.4,8.1,and avoid the version 1.001.0000001.2,8.0.2,8.0.4,8.1