CVE-2022-30564

Some Dahua embedded products have a vulnerability of unauthorized modification of the device timestamp. By sending a specially crafted packet to the vulnerable interface, an attacker can modify the device system time.

Published: 2023-02-09 Last update: 2025-03-25 Assigner: [email protected] Source: [email protected]

Conclusion & alert: CVE-2022-30564 is rated Low Risk (35.3/100): CVSS Medium severity, with low exploitation likelihood (EPSS 0.18%). Mandatory action: Monitor for updates and reassess as exploit intelligence or EPSS changes.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2022-30564

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-02-15 0.05% 0.18% +0.13%
2 2024-01-10 0.05% 0.05% +0.00%
3 2023-03-07 0.05%

Full EPSS history (4 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2022-30564

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
5.3 3.1 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Click to expand
Attack vector (AV:N)
Could be attacked over the internet or any normal routed network—not just someone sitting at the machine.
Attack complexity (AC:L)
Once they can reach the bug, pulling it off is straightforward—no weird race conditions or rare setup.
Privileges required (PR:N)
No account or special rights needed—anonymous or random user is enough.
User interaction (UI:N)
Nobody has to click “OK” or open a trap file; it can work without a victim helping.
Scope (S:U)
Damage stays in the same “trust bubble” as the broken component—no big spill into unrelated systems.
Confidentiality (C:N)
Doesn’t really leak secrets in a meaningful way.
Integrity (I:L)
Attackers could change some data, but it’s limited—not everything goes.
Availability (A:N)
Service keeps running; no real outage angle.
3.9 1.4 [email protected]
5.3 3.1 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N Click to expand
Attack vector (AV:N)
Could be attacked over the internet or any normal routed network—not just someone sitting at the machine.
Attack complexity (AC:L)
Once they can reach the bug, pulling it off is straightforward—no weird race conditions or rare setup.
Privileges required (PR:N)
No account or special rights needed—anonymous or random user is enough.
User interaction (UI:N)
Nobody has to click “OK” or open a trap file; it can work without a victim helping.
Scope (S:U)
Damage stays in the same “trust bubble” as the broken component—no big spill into unrelated systems.
Confidentiality (C:N)
Doesn’t really leak secrets in a meaningful way.
Integrity (I:L)
Attackers could change some data, but it’s limited—not everything goes.
Availability (A:N)
Service keeps running; no real outage angle.
3.9 1.4 134c704f-9b21-4f2e-91b3-4a467353bcc0

Weakness enumeration for CVE-2022-30564

Affected software / configurations for CVE-2022-30564

Vendor Product Version Raw CPE
dahuasecurity ipc-hf71242f-z-x_firmware < 2.800.0000000.4.r.210708 cpe:2.3:o:dahuasecurity:ipc-hf71242f-z-x_firmware:*:*:*:*:*:*:*:*
dahuasecurity ipc-hf7442f-z-x_firmware < 2.800.0000000.4.r.210708 cpe:2.3:o:dahuasecurity:ipc-hf7442f-z-x_firmware:*:*:*:*:*:*:*:*
dahuasecurity ipc-hf7842f-z-x_firmware < 2.800.0000000.4.r.210708 cpe:2.3:o:dahuasecurity:ipc-hf7842f-z-x_firmware:*:*:*:*:*:*:*:*
dahuasecurity ipc-hf5241f-ze_firmware < 2.840.0000000.18.r.220629 cpe:2.3:o:dahuasecurity:ipc-hf5241f-ze_firmware:*:*:*:*:*:*:*:*
dahuasecurity ipc-hf5442f-ze_firmware < 2.840.0000000.18.r.220629 cpe:2.3:o:dahuasecurity:ipc-hf5442f-ze_firmware:*:*:*:*:*:*:*:*
dahuasecurity ipc-hf5541f-ze_firmware < 2.840.0000000.18.r.220629 cpe:2.3:o:dahuasecurity:ipc-hf5541f-ze_firmware:*:*:*:*:*:*:*:*
dahuasecurity ipc-hf5842f-ze_firmware < 2.840.0000000.18.r.220629 cpe:2.3:o:dahuasecurity:ipc-hf5842f-ze_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd5a225gb-hnr_firmware < 2.812.0000032.2.r.220804 cpe:2.3:o:dahuasecurity:sd5a225gb-hnr_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd5a225gb-hnr-sl_firmware < 2.812.0000032.2.r.220804 cpe:2.3:o:dahuasecurity:sd5a225gb-hnr-sl_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd5a225xa-hnr_firmware < 2.812.0000032.2.r.220804 cpe:2.3:o:dahuasecurity:sd5a225xa-hnr_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd5a225xa-hnr-sl_firmware < 2.812.0000032.2.r.220804 cpe:2.3:o:dahuasecurity:sd5a225xa-hnr-sl_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd5a232gb-hnr_firmware < 2.812.0000032.2.r.220804 cpe:2.3:o:dahuasecurity:sd5a232gb-hnr_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd5a232xb-hnr_firmware < 2.812.0000032.2.r.220804 cpe:2.3:o:dahuasecurity:sd5a232xb-hnr_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd5a232xb-hnr-ac_firmware < 2.812.0000032.2.r.220804 cpe:2.3:o:dahuasecurity:sd5a232xb-hnr-ac_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd5a232xb-hnr-p_firmware < 2.812.0000032.2.r.220804 cpe:2.3:o:dahuasecurity:sd5a232xb-hnr-p_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd5a245gb-hnr_firmware < 2.812.0000032.2.r.220804 cpe:2.3:o:dahuasecurity:sd5a245gb-hnr_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd5a245xa-hnr_firmware < 2.812.0000032.2.r.220804 cpe:2.3:o:dahuasecurity:sd5a245xa-hnr_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd5a425ga-hnr_firmware < 2.812.0000032.2.r.220804 cpe:2.3:o:dahuasecurity:sd5a425ga-hnr_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd5a425xa-hnr_firmware < 2.812.0000032.2.r.220804 cpe:2.3:o:dahuasecurity:sd5a425xa-hnr_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd5a432gb-hnr_firmware < 2.812.0000032.2.r.220804 cpe:2.3:o:dahuasecurity:sd5a432gb-hnr_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd5a445gb-hnr_firmware < 2.812.0000032.2.r.220804 cpe:2.3:o:dahuasecurity:sd5a445gb-hnr_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd5a445xa-hnr_firmware < 2.812.0000032.2.r.220804 cpe:2.3:o:dahuasecurity:sd5a445xa-hnr_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd5a445xa-hnr-1t_firmware < 2.812.0000032.2.r.220804 cpe:2.3:o:dahuasecurity:sd5a445xa-hnr-1t_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd5a825-hnr-ya_firmware < 2.812.0000032.2.r.220804 cpe:2.3:o:dahuasecurity:sd5a825-hnr-ya_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd5a825ga-hnr_firmware < 2.812.0000032.2.r.220804 cpe:2.3:o:dahuasecurity:sd5a825ga-hnr_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd22204-gc-lb_firmware < 2.813.0000017.0.r.220928 cpe:2.3:o:dahuasecurity:sd22204-gc-lb_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd22204db-gny_firmware < 2.813.0000017.0.r.220928 cpe:2.3:o:dahuasecurity:sd22204db-gny_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd22204db-gny-w_firmware < 2.813.0000017.0.r.220928 cpe:2.3:o:dahuasecurity:sd22204db-gny-w_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd22204t-gn-s2_firmware < 2.813.0000017.0.r.220928 cpe:2.3:o:dahuasecurity:sd22204t-gn-s2_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd22204ue-gn_firmware < 2.813.0000017.0.r.220928 cpe:2.3:o:dahuasecurity:sd22204ue-gn_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd22204ue-gn-w_firmware < 2.813.0000017.0.r.220928 cpe:2.3:o:dahuasecurity:sd22204ue-gn-w_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd22404t-gn_firmware < 2.813.0000017.0.r.220928 cpe:2.3:o:dahuasecurity:sd22404t-gn_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd22404t-gn-w_firmware < 2.813.0000017.0.r.220928 cpe:2.3:o:dahuasecurity:sd22404t-gn-w_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd59131i-hc\(-s3\)_firmware < 2.812.0000017.0.r.220928 cpe:2.3:o:dahuasecurity:sd59131i-hc\(-s3\)_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd59225-hc-la_firmware < 2.812.0000017.0.r.220928 cpe:2.3:o:dahuasecurity:sd59225-hc-la_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd59225i-hc\(-s3\)_firmware < 2.812.0000017.0.r.220928 cpe:2.3:o:dahuasecurity:sd59225i-hc\(-s3\)_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd59225u-hni_firmware < 2.812.0000017.0.r.220928 cpe:2.3:o:dahuasecurity:sd59225u-hni_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd59230i-hc\(-s3\)_firmware < 2.812.0000017.0.r.220928 cpe:2.3:o:dahuasecurity:sd59230i-hc\(-s3\)_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd59232-hc-la_firmware < 2.812.0000017.0.r.220928 cpe:2.3:o:dahuasecurity:sd59232-hc-la_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd59232xa-hnr_firmware < 2.812.0000017.0.r.220928 cpe:2.3:o:dahuasecurity:sd59232xa-hnr_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd59430i-hc_firmware < 2.812.0000017.0.r.220928 cpe:2.3:o:dahuasecurity:sd59430i-hc_firmware:*:*:*:*:*:*:*:*
dahuasecurity sd59432xa-hnr_firmware < 2.812.0000017.0.r.220928 cpe:2.3:o:dahuasecurity:sd59432xa-hnr_firmware:*:*:*:*:*:*:*:*
dahuasecurity nvr4216-i_firmware < 4.002.0000000.3.r.221122 cpe:2.3:o:dahuasecurity:nvr4216-i_firmware:*:*:*:*:*:*:*:*
dahuasecurity nvr4416-16p-4ks2\/i_firmware < 4.002.0000000.3.r.221122 cpe:2.3:o:dahuasecurity:nvr4416-16p-4ks2\/i_firmware:*:*:*:*:*:*:*:*
dahuasecurity nvr4416-4ks2\/i_firmware < 4.002.0000000.3.r.221122 cpe:2.3:o:dahuasecurity:nvr4416-4ks2\/i_firmware:*:*:*:*:*:*:*:*
dahuasecurity nvr4432-16p-4ks2\/i_firmware < 4.002.0000000.3.r.221122 cpe:2.3:o:dahuasecurity:nvr4432-16p-4ks2\/i_firmware:*:*:*:*:*:*:*:*
dahuasecurity nvr4432-4ks2\/i_firmware < 4.002.0000000.3.r.221122 cpe:2.3:o:dahuasecurity:nvr4432-4ks2\/i_firmware:*:*:*:*:*:*:*:*
dahuasecurity nvr4432-i_firmware < 4.002.0000000.3.r.221122 cpe:2.3:o:dahuasecurity:nvr4432-i_firmware:*:*:*:*:*:*:*:*
dahuasecurity nvr4816-16p-4ks2\/i_firmware < 4.002.0000000.3.r.221122 cpe:2.3:o:dahuasecurity:nvr4816-16p-4ks2\/i_firmware:*:*:*:*:*:*:*:*
dahuasecurity nvr4816-4ks2\/i_firmware < 4.002.0000000.3.r.221122 cpe:2.3:o:dahuasecurity:nvr4816-4ks2\/i_firmware:*:*:*:*:*:*:*:*
dahuasecurity nvr4832-16p-4ks2\/i_firmware < 4.002.0000000.3.r.221122 cpe:2.3:o:dahuasecurity:nvr4832-16p-4ks2\/i_firmware:*:*:*:*:*:*:*:*
dahuasecurity nvr4832-4ks2\/i_firmware < 4.002.0000000.3.r.221122 cpe:2.3:o:dahuasecurity:nvr4832-4ks2\/i_firmware:*:*:*:*:*:*:*:*
dahuasecurity nvr4832-i_firmware < 4.002.0000000.3.r.221122 cpe:2.3:o:dahuasecurity:nvr4832-i_firmware:*:*:*:*:*:*:*:*
dahuasecurity nvr5216-16p-i\/l_firmware < 4.002.0000000.3.r.221122 cpe:2.3:o:dahuasecurity:nvr5216-16p-i\/l_firmware:*:*:*:*:*:*:*:*
dahuasecurity nvr5216-8p-i\/l_firmware < 4.002.0000000.3.r.221122 cpe:2.3:o:dahuasecurity:nvr5216-8p-i\/l_firmware:*:*:*:*:*:*:*:*
dahuasecurity nvr5432-16p-i\/l_firmware < 4.002.0000000.3.r.221122 cpe:2.3:o:dahuasecurity:nvr5432-16p-i\/l_firmware:*:*:*:*:*:*:*:*
dahuasecurity nvr5832-i\/l_firmware < 4.002.0000000.3.r.221122 cpe:2.3:o:dahuasecurity:nvr5832-i\/l_firmware:*:*:*:*:*:*:*:*
dahuasecurity nvr5832\/5864-i_firmware < 4.002.0000000.3.r.221122 cpe:2.3:o:dahuasecurity:nvr5832\/5864-i_firmware:*:*:*:*:*:*:*:*
dahuasecurity nvr5864-i\/l_firmware < 4.002.0000000.3.r.221122 cpe:2.3:o:dahuasecurity:nvr5864-i\/l_firmware:*:*:*:*:*:*:*:*
dahuasecurity nvr2104-i_firmware < 4.002.0000000.3.r.221122 cpe:2.3:o:dahuasecurity:nvr2104-i_firmware:*:*:*:*:*:*:*:*
dahuasecurity nvr2104hs-i_firmware < 4.002.0000000.3.r.221122 cpe:2.3:o:dahuasecurity:nvr2104hs-i_firmware:*:*:*:*:*:*:*:*
dahuasecurity nvr2108-i_firmware < 4.002.0000000.3.r.221122 cpe:2.3:o:dahuasecurity:nvr2108-i_firmware:*:*:*:*:*:*:*:*
dahuasecurity nvr2108hs-i_firmware < 4.002.0000000.3.r.221122 cpe:2.3:o:dahuasecurity:nvr2108hs-i_firmware:*:*:*:*:*:*:*:*
dahuasecurity nvr2116-i_firmware < 4.002.0000000.3.r.221122 cpe:2.3:o:dahuasecurity:nvr2116-i_firmware:*:*:*:*:*:*:*:*
dahuasecurity nvr2116hs-i_firmware < 4.002.0000000.3.r.221122 cpe:2.3:o:dahuasecurity:nvr2116hs-i_firmware:*:*:*:*:*:*:*:*
dahuasecurity nvr2204-i_firmware < 4.002.0000000.3.r.221122 cpe:2.3:o:dahuasecurity:nvr2204-i_firmware:*:*:*:*:*:*:*:*
dahuasecurity nvr2208-i_firmware < 4.002.0000000.3.r.221122 cpe:2.3:o:dahuasecurity:nvr2208-i_firmware:*:*:*:*:*:*:*:*
dahuasecurity nvr2216-i_firmware < 4.002.0000000.3.r.221122 cpe:2.3:o:dahuasecurity:nvr2216-i_firmware:*:*:*:*:*:*:*:*
dahuasecurity xvr5104h-i2_firmware < 4.001.0000003.3.r.221124 cpe:2.3:o:dahuasecurity:xvr5104h-i2_firmware:*:*:*:*:*:*:*:*
dahuasecurity xvr5104he-i2_firmware < 4.001.0000003.3.r.221124 cpe:2.3:o:dahuasecurity:xvr5104he-i2_firmware:*:*:*:*:*:*:*:*
dahuasecurity xvr5104hs-i2_firmware < 4.001.0000003.3.r.221124 cpe:2.3:o:dahuasecurity:xvr5104hs-i2_firmware:*:*:*:*:*:*:*:*
dahuasecurity xvr5108he-i2_firmware < 4.001.0000003.3.r.221124 cpe:2.3:o:dahuasecurity:xvr5108he-i2_firmware:*:*:*:*:*:*:*:*
dahuasecurity xvr5108hs-i2_firmware < 4.001.0000003.3.r.221124 cpe:2.3:o:dahuasecurity:xvr5108hs-i2_firmware:*:*:*:*:*:*:*:*
dahuasecurity xvr5116h-i2_firmware < 4.001.0000005.1.r.221123 cpe:2.3:o:dahuasecurity:xvr5116h-i2_firmware:*:*:*:*:*:*:*:*
dahuasecurity xvr5108h-i2_firmware < 4.001.0000003.3.r.221124 cpe:2.3:o:dahuasecurity:xvr5108h-i2_firmware:*:*:*:*:*:*:*:*
dahuasecurity xvr5116he-i2_firmware < 4.001.0000005.1.r.221123 cpe:2.3:o:dahuasecurity:xvr5116he-i2_firmware:*:*:*:*:*:*:*:*
dahuasecurity xvr5116hs-i2_firmware < 4.001.0000005.1.r.221123 cpe:2.3:o:dahuasecurity:xvr5116hs-i2_firmware:*:*:*:*:*:*:*:*
dahuasecurity xvr5216a-i2_firmware < 4.001.0000005.1.r.221123 cpe:2.3:o:dahuasecurity:xvr5216a-i2_firmware:*:*:*:*:*:*:*:*
dahuasecurity xvr5216an-i2_firmware < 4.001.0000005.1.r.221123 cpe:2.3:o:dahuasecurity:xvr5216an-i2_firmware:*:*:*:*:*:*:*:*
dahuasecurity xvr5232an-i2_firmware < 4.001.0000003.3.r.221124 cpe:2.3:o:dahuasecurity:xvr5232an-i2_firmware:*:*:*:*:*:*:*:*

References for CVE-2022-30564

cvelogic Threat Intelligence