| Package | Affected versions | Patched versions |
|---|---|---|
| dss express | = 7.002.1760000.2= 8.0.2= 8.0.4= 8.1= 8.1.1 | |
| dss professional | = 7.002.1760000.2= 8.0.2= 8.0.4= 8.1= 8.1.1 |
Some Dahua software products have a vulnerability of unauthenticated search for devices. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could unauthenticated search for devices in range of IPs from remote DSS Server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free