| Package | Affected versions | Patched versions |
|---|---|---|
| dss express | = 7.002.1760000.2= 8.0.2= 8.0.4= 8.1= 8.1.1 | |
| dss professional | = 7.002.1760000.2= 8.0.2= 8.0.4= 8.1= 8.1.1 |
Some Dahua software products have a vulnerability of unauthenticated request of MQTT credentials. An attacker can obtain encrypted MQTT credentials by sending a specific crafted packet to the vulnerable interface (the credentials cannot be directly exploited).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free