CVE:CVE-2022-45434
CNNVD:CNNVD-202212-3985
Dahua software products是中国大华（Dahua）公司的一系列应用程序。
若干Dahua软件产品存在安全漏洞，该漏洞源于其远程DSS服务器对ICMP请求不受限允许未经身份认证的攻击者可以绕过防火墙访问控制策略后发送特定的精心制作的数据包利用服务器向指定目标主机发起ICMP请求攻击。
solution:Upgrade dahuasecurity dhi-dss7016d-s2_firmware to a higher version than 1.001.0000001.2,8.0.2,8.0.4,8.1,and avoid the version 1.001.0000001.2,8.0.2,8.0.4,8.1; Upgrade dahuasecurity dhi-dss7016dr-s2_firmware to a higher version than 1.001.0000001.2,8.0.2,8.0.4,8.1,and avoid the version 1.001.0000001.2,8.0.2,8.0.4,8.1; Upgrade dahuasecurity dhi-dss4004-s2_firmware to a higher version than 1.001.0000001.2,8.0.2,8.0.4,8.1,and avoid the version 1.001.0000001.2,8.0.2,8.0.4,8.1; Upgrade dahuasecurity dss_express to a higher version than 7.002.1760000.2,8.0.2,8.0.4,8.1,8.1.1,and avoid the version 7.002.1760000.2,8.0.2,8.0.4,8.1,8.1.1; Upgrade dahuasecurity dss_professional to a higher version than 7.002.1760000.2,8.0.2,8.0.4,8.1,8.1.1,and avoid the version 7.002.1760000.2,8.0.2,8.0.4,8.1,8.1.1