| Package | Affected versions | Patched versions |
|---|---|---|
| dss express | = 7.002.1760000.2= 8.0.2= 8.0.4= 8.1= 8.1.1 | |
| dss professional | = 7.002.1760000.2= 8.0.2= 8.0.4= 8.1= 8.1.1 |
Some Dahua software products have a vulnerability of unauthenticated traceroute host from remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could get the traceroute results.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free