Some Dahua software products have a vulnerability of unauthenticated traceroute host from remote DSS Server. After bypassing the firewall access control policy, by sending a specific crafted packet to the vulnerable interface, an attacker could get the traceroute results.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-45433
• https://www.dahuasecurity.com/support/cybersecurity/details/1137