Dahua Vulnerabilities and Affected Products
Vulnerabilities associated with Smart Park Integrated Management Platform.
Products
Clear product- NVR4XXX5 vulnerabilities
- IPC4 vulnerabilities
- SD3 vulnerabilities
- IP Camera Firmware2 vulnerabilities
- EIMS1 vulnerability
- IP Camera1 vulnerability
- IPC-HDW1200S1 vulnerability
- IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X1 vulnerability
- IPC-HFW1200S1 vulnerability
- IPC-HFW2300R-Z1 vulnerability
- IPC-HFW5220E-Z1 vulnerability
- IPC-HX8XXX and NVR4XXX1 vulnerability
- IPC/SD1 vulnerability
- IPC/SD/NVR/XVR/EVS/VTO/VTH/ASI/TPC1 vulnerability
- NVR2-4KS31 vulnerability
- NVR4XXX and IPC-HX8XXX1 vulnerability
- Smart Cloud Gateway Registration Management Platform1 vulnerability
- Smart Park Integrated Management Platform1 vulnerability
- Smart Park Management1 vulnerability
- Smart Parking Management1 vulnerability
- XVR1B16H-I/T1 vulnerability
- XVR4232AN-I/T1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-7309CRITICAL | Dahua Smart Park Integrated Management Platform Front-End Arbitrary File UploadA path traversal vulnerability exists in the Dahua Smart Park Integrated Management Platform (also referred to as the Dahua Smart Campus Integrated Management Platform), affecting the SOAP-based GIS bitmap upload interface. The flaw allows unauthenticated remote attackers to upload arbitrary files to the server via crafted SOAP requests, including executable JSP payloads. Successful exploitation may lead to remote code execution (RCE) and full compromise of the affected system. The vulnerability… | CVSS10.0v4.0 | EPSS0.813% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |