CVE-2022-22253: The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability.

PriorityP337high7.5CVSS 3.1

AVNACLPRNUINSUCNIHAN

EPSS

0.29%

21.0th percentile

The DFX module has a vulnerability of improper validation of integrity check values.Successful exploitation of this vulnerability may affect system stability.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
huawei	emui	—	—
huawei	emui	—	—
huawei	emui	—	—
huawei	emui	—	—
huawei	emui	—	—
huawei	emui	—	—
huawei	harmonyos	—	—
huawei	magic_ui	—	—
huawei	magic_ui	—	—
huawei	magic_ui	—	—
huawei	magic_ui	—	—

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

Suricata

ET EXPLOIT Xiongmai/HiSilicon DVR - Successful Auth - Possilbe CVE-2020-22253 Attempt

suricata·2022-12-02·CVSS 9.8

CVE-2020-22253 [CRITICAL] ET EXPLOIT Xiongmai/HiSilicon DVR - Successful Auth - Possilbe CVE-2020-22253 Attempt ET EXPLOIT Xiongmai/HiSilicon DVR - Successful Auth - Possilbe CVE-2020-22253 Attempt Rule: alert tcp-pkt $HOME_NET 9530 -> any any (msg:"ET EXPLOIT Xiongmai/HiSilicon DVR - Successful Auth - Possilbe CVE-2020-22253 Attempt"; flow:established,to_client; flowbits:isset,ET.CVE-2020-22253; flowbits:set,ET.CVE-2020-22253_stage2; content:"verify:OK"; reference:url,habr.com/en/post/486856/; reference:url,vulncheck.com/blog/xiongmai-iot-exploitation; reference:url,github.com/tothi/hs-dvr-telnet; reference:cve,2020-22253; classtype:successful-admin; sid:2041647; rev:1; metadata:attack_target IoT, created_at 2022_12_02, cve CVE_2020_22253, deployment Perimeter, confidence High, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2022_12_02;)

Suricata

ET EXPLOIT Xiongmai/HiSilicon DVR - OpenTelnet Inbound - Possilbe CVE-2020-22253 Attempt

suricata·2022-12-02·CVSS 9.8

CVE-2020-22253 [CRITICAL] ET EXPLOIT Xiongmai/HiSilicon DVR - OpenTelnet Inbound - Possilbe CVE-2020-22253 Attempt ET EXPLOIT Xiongmai/HiSilicon DVR - OpenTelnet Inbound - Possilbe CVE-2020-22253 Attempt Rule: alert tcp-pkt any any -> $HOME_NET 9530 (msg:"ET EXPLOIT Xiongmai/HiSilicon DVR - OpenTelnet Inbound - Possilbe CVE-2020-22253 Attempt"; flow:established,to_server; flowbits:set,ET.CVE-2020-22253; flowbits:noalert; stream_size:server,<,5; dsize:20; content:"|13|OpenTelnet:OpenOnce"; reference:url,habr.com/en/post/486856/; reference:url,vulncheck.com/blog/xiongmai-iot-exploitation; reference:url,github.com/tothi/hs-dvr-telnet; reference:cve,2020-22253; classtype:attempted-recon; sid:2041646; rev:2; metadata:attack_target IoT, created_at 2022_12_02, cve CVE_2020_22253, deployment Perimeter, confidence High, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03

Suricata

ET EXPLOIT Xiongmai/HiSilicon DVR - Successful Telnet Opening - Successful CVE-2020-22253 Attempt

suricata·2022-12-02·CVSS 9.8

CVE-2020-22253 [CRITICAL] ET EXPLOIT Xiongmai/HiSilicon DVR - Successful Telnet Opening - Successful CVE-2020-22253 Attempt ET EXPLOIT Xiongmai/HiSilicon DVR - Successful Telnet Opening - Successful CVE-2020-22253 Attempt Rule: alert tcp-pkt $HOME_NET 9530 -> any any (msg:"ET EXPLOIT Xiongmai/HiSilicon DVR - Successful Telnet Opening - Successful CVE-2020-22253 Attempt"; flow:established,to_client; flowbits:isset,ET.CVE-2020-22253; flowbits:isset,ET.CVE-2020-22253_stage2; content:"Open:OK"; reference:url,habr.com/en/post/486856/; reference:url,vulncheck.com/blog/xiongmai-iot-exploitation; reference:url,github.com/tothi/hs-dvr-telnet; reference:cve,2020-22253; classtype:successful-admin; sid:2041648; rev:1; metadata:attack_target IoT, created_at 2022_12_02, cve CVE_2020_22253, confidence High, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2022_12_02;)