CVE-2022-30562

MEDIUM
4.7
CVSS Score
Published: June 28, 2022 at 01:43 PM UTC
Updated: June 17, 2026 at 04:43 AM UTC
83 products affected across 1 vendorIpc HFW2231T Zs S2 FirmwareIpc HFW2531S S S2 FirmwareASI7213X T1 Firmware

Using IPCHDBW2XXX IPCHFW2XXX ASI7XXXX by N/A?

Get instant alerts when new vulnerabilities affect IPCHDBW2XXX IPCHFW2XXX ASI7XXXX - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM4.7
Exploit prediction
EPSS 0.7%

Description

If the user enables the https function on the device, an attacker can modify the user’s request data packet through a man-in-the-middle attack ,Injection of a malicious URL in the Host: header of the HTTP Request results in a 302 redirect to an attacker-controlled page.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v < 2021-09
Affected range stops below 2021-09, so it looks safe — our inference, not a vendor statement
dahuasecurity-asi7213x (same device)
v < 2021-09
Affected range stops below 2021-09, so it looks safe — our inference, not a vendor statement
dahuasecurity-asi7213x-t1 (same device)
v < 2021-09
Affected range stops below 2021-09, so it looks safe — our inference, not a vendor statement
dahuasecurity-asi7223x-a (same device)
v < 2021-09
Affected range stops below 2021-09, so it looks safe — our inference, not a vendor statement
dahuasecurity-asi7223x-a-t1 (same device)
v < 2022-04
Affected range stops below 2022-04, so it looks safe — our inference, not a vendor statement
dahuasecurity-ipc-hdbw2230e-s-s2 (same device)
v < 2022-04
Affected range stops below 2022-04, so it looks safe — our inference, not a vendor statement
dahuasecurity-ipc-hdbw2231e-s-s2 (same device)
v < 2022-04
Affected range stops below 2022-04, so it looks safe — our inference, not a vendor statement
dahuasecurity-ipc-hdbw2231f-as-s2 (same device)
v < 2022-04
Affected range stops below 2022-04, so it looks safe — our inference, not a vendor statement
dahuasecurity-ipc-hdbw2231r-zas-s2 (same device)
v < 2022-04
Affected range stops below 2022-04, so it looks safe — our inference, not a vendor statement
dahuasecurity-ipc-hdbw2231r-zs-s2 (same device)
v < 2022-04
Affected range stops below 2022-04, so it looks safe — our inference, not a vendor statement
dahuasecurity-ipc-hdbw2431e-s-s2 (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

CVSS

Attack Vector
NETWORK
Complexity
HIGH
Privileges
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-601

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card