Every CVE Search/ Get API key

CVE-2022-30561

When an attacker uses a man-in-the-middle attack to sniff the request packets with success...

5.9 Medium

When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in, the attacker could log in to the device by replaying the user's login packet.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
None

Exploit likelihood

0.77%Down 0.1 points since Jun 29, 2022
90%50%10%1%

What each source reports

NVD Score used 5.9

When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in, the attacker could log in to the device by replaying the user's login packet.

Record
CVE-2022-30561
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in, the attacker could log in to the device by replaying the user's login packet.

Record
CVE-2022-30561
Updated
2026-11-02
EUVDEUVD-2022-52415 No score

When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in, the attacker could log in to the device by replaying the user's login packet.

Record
EUVD-2022-52415
Updated
2026-11-03
GitHub AdvisoriesGHSA-hrch-w2hr-7wx7 5.9

When an attacker uses a man-in-the-middle attack to sniff the request packets with success...

When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in, the attacker could log in to the device by replaying the user's login packet.

Record
GHSA-hrch-w2hr-7wx7
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated
2026-11-02

Affected products

Show 28 moreShow less

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-30561 is a medium vulnerability (CVSS 5.9) in Dahuasecurity Asi7213x-t1 Firmware, published June 28, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.77%, the 55th percentile. No source names a fixed version.

References

MoveEnter Open