| Package | Affected versions | Patched versions |
|---|---|---|
| dss express | = 7.002.1760000.2= 8.0.2= 8.0.4= 8.1= 8.1.1 | |
| dss professional | = 7.002.1760000.2= 8.0.2= 8.0.4= 8.1= 8.1.1 |
Some Dahua software products have a vulnerability of unauthenticated un-throttled ICMP requests on remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could exploit the victim server to launch ICMP request attack to the designated target host.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free