CVE:CVE-2022-45430
CNNVD:CNNVD-202212-3990
Dahua software products是中国大华（Dahua）公司的一系列应用程序。
若干Dahua软件产品存在安全漏洞，该漏洞源于未经身份认证的攻击者可以在绕过防火墙的访问控制策略后向易受攻击的接口发送特定的精心制作的数据包来启用或禁用SSHD服务。
solution:Upgrade dahuasecurity dss_express to a higher version than 7.002.1760000.2,8.0.2,8.0.4,8.1,8.1.1,and avoid the version 7.002.1760000.2,8.0.2,8.0.4,8.1,8.1.1; Upgrade dahuasecurity dss_professional to a higher version than 7.002.1760000.2,8.0.2,8.0.4,8.1,8.1.1,and avoid the version 7.002.1760000.2,8.0.2,8.0.4,8.1,8.1.1; Upgrade dahuasecurity dhi-dss7016d-s2_firmware to a higher version than 1.001.0000001.2,8.0.2,8.0.4,8.1,and avoid the version 1.001.0000001.2,8.0.2,8.0.4,8.1; Upgrade dahuasecurity dhi-dss7016dr-s2_firmware to a higher version than 1.001.0000001.2,8.0.2,8.0.4,8.1,and avoid the version 1.001.0000001.2,8.0.2,8.0.4,8.1; Upgrade dahuasecurity dhi-dss4004-s2_firmware to a higher version than 1.001.0000001.2,8.0.2,8.0.4,8.1,and avoid the version 1.001.0000001.2,8.0.2,8.0.4,8.1