CVE:CVE-2022-45427
CNNVD:CNNVD-202212-3992
Dahua software products是中国大华（Dahua）公司的一系列应用程序。
若干Dahua软件产品存在安全漏洞，该漏洞源于其文件上传不受限导致攻击者在获取普通用户的权限后通过发送特定的精心制作的报文可以上传任意文件。
solution:Upgrade dahuasecurity dss_express to a higher version than 7.002.1760000.2,8.0.2,8.0.4,8.1,8.1.1,and avoid the version 7.002.1760000.2,8.0.2,8.0.4,8.1,8.1.1; Upgrade dahuasecurity dss_professional to a higher version than 7.002.1760000.2,8.0.2,8.0.4,8.1,8.1.1,and avoid the version 7.002.1760000.2,8.0.2,8.0.4,8.1,8.1.1; Upgrade dahuasecurity dhi-dss7016d-s2_firmware to a higher version than 1.001.0000001.2,8.0.2,8.0.4,8.1,and avoid the version 1.001.0000001.2,8.0.2,8.0.4,8.1; Upgrade dahuasecurity dhi-dss7016dr-s2_firmware to a higher version than 1.001.0000001.2,8.0.2,8.0.4,8.1,and avoid the version 1.001.0000001.2,8.0.2,8.0.4,8.1; Upgrade dahuasecurity dhi-dss4004-s2_firmware to a higher version than 1.001.0000001.2,8.0.2,8.0.4,8.1,and avoid the version 1.001.0000001.2,8.0.2,8.0.4,8.1