CVE-2022-30563
When an attacker uses a man-in-the-middle attack to sniff the request packets with success...
When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in through ONVIF, he can log in to the device by replaying the user's login packet.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in through ONVIF, he can log in to the device by replaying the user's login packet.
- Record
CVE-2022-30563- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - CVSS 2.0
- 5.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:N - Updated
- 2026-11-02
CVE List No score
When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in through ONVIF, he can log in to the device by replaying the user's login packet.
- Record
CVE-2022-30563- Updated
- 2026-11-02
EUVDEUVD-2022-52417 No score
When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in through ONVIF, he can log in to the device by replaying the user's login packet.
- Record
EUVD-2022-52417- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fm79-xjf8-74gg
When an attacker uses a man-in-the-middle attack to sniff the request packets with success...
When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in through ONVIF, he can log in to the device by replaying the user's login packet.
- Record
GHSA-fm79-xjf8-74gg- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
Affected products
- dahuasecurity asi7213x-t1 firmware
- dahuasecurity asi7213x firmware
- dahuasecurity asi7223x-a-t1 firmware
- dahuasecurity asi7223x-a firmware
- dahuasecurity ipc-hdbw2230e-s-s2 firmware
- dahuasecurity ipc-hdbw2231e-s-s2 firmware
- dahuasecurity ipc-hdbw2231f-as-s2 firmware
- dahuasecurity ipc-hdbw2231r-zas-s2 firmware
- dahuasecurity ipc-hdbw2231r-zs-s2 firmware
- dahuasecurity ipc-hdbw2431e-s-s2 firmware
- dahuasecurity ipc-hdbw2431r-zas-s2 firmware
- dahuasecurity ipc-hdbw2431r-zs-s2 firmware
Show 28 moreShow less
- dahuasecurity ipc-hdbw2531e-s-s2 firmware
- dahuasecurity ipc-hdbw2531r-zas-s2 firmware
- dahuasecurity ipc-hdbw2531r-zs-s2 firmware
- dahuasecurity ipc-hdbw2831e-s-s2 firmware
- dahuasecurity ipc-hdbw2831r-zas-s2 firmware
- dahuasecurity ipc-hdbw2831r-zs-s2 firmware
- dahuasecurity ipc-hfw2230s-s-s2 firmware
- dahuasecurity ipc-hfw2231m-as-i2-b-s2 firmware
- dahuasecurity ipc-hfw2231s-s-s2 firmware
- dahuasecurity ipc-hfw2231t-as-s2 firmware
- dahuasecurity ipc-hfw2231t-zas-s2 firmware
- dahuasecurity ipc-hfw2231t-zs-s2 firmware
- dahuasecurity ipc-hfw2239m-as-led-b-s2 firmware
- dahuasecurity ipc-hfw2239s-sa-led-s2 firmware
- dahuasecurity ipc-hfw2431s-s-s2 firmware
- dahuasecurity ipc-hfw2431t-as-s2 firmware
- dahuasecurity ipc-hfw2431t-zas-s2 firmware
- dahuasecurity ipc-hfw2431t-zs-s2 firmware
- dahuasecurity ipc-hfw2439m-as-led-b-s2 firmware
- dahuasecurity ipc-hfw2439s-sa-led-s2 firmware
- dahuasecurity ipc-hfw2531s-s-s2 firmware
- dahuasecurity ipc-hfw2531t-as-s2 firmware
- dahuasecurity ipc-hfw2531t-zas-s2 firmware
- dahuasecurity ipc-hfw2531t-zs-s2 firmware
- dahuasecurity ipc-hfw2831s-s-s2 firmware
- dahuasecurity ipc-hfw2831t-as-s2 firmware
- dahuasecurity ipc-hfw2831t-zas-s2 firmware
- dahuasecurity ipc-hfw2831t-zs-s2 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-30563 is a high vulnerability (CVSS 7.4) in Dahuasecurity Asi7213x-t1 Firmware, published June 28, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.00%, the 63rd percentile. No source names a fixed version.