CVE-2019-9681

🗓️ 17 Sep 2019 16:02:18Reported by dahuaType

Online upgrade information in some Dahua firmware not encrypted. Attackers can obtain this info

Reporter	Title	Published	Views	Family All 7
Cvelist	CVE-2019-9681	17 Sep 201916:02	–	cvelist
EUVD	EUVD-2019-19047	7 Oct 202500:30	–	euvd
NVD	CVE-2019-9681	17 Sep 201917:15	–	nvd
OSV	CVE-2019-9681	17 Sep 201917:15	–	osv
Prion	Design/Logic Flaw	17 Sep 201917:15	–	prion
RedhatCVE	CVE-2019-9681	22 May 202510:23	–	redhatcve
Tenable Nessus	Dahua Security Cameras Cleartext Storage of Sensitive Information (CVE-2019-9681)	29 Jul 202400:00	–	nessus

NVD

Node

dahuasecurity ipc-hdw1x2x_firmwareRange<2019-08-18

AND

dahuasecurity ipc-hdw1x2xMatch-

Node

dahuasecurity ipc-hfw1x2x_firmwareRange<2019-08-18

AND

dahuasecurity ipc-hfw1x2xMatch-

Node

dahuasecurity ipc-hdw2x2x_firmwareRange<2019-08-18

AND

dahuasecurity ipc-hdw2x2xMatch-

Node

dahuasecurity ipc-hfw2x2x_firmwareRange<2019-08-18

AND

dahuasecurity ipc-hfw2x2xMatch-

Node

dahuasecurity ipc-hdw4x2x_firmwareRange<2019-08-18

AND

dahuasecurity ipc-hdw4x2xMatch-

Node

dahuasecurity ipc-hfw4x2x_firmwareRange<2019-08-18

AND

dahuasecurity ipc-hfw4x2xMatch-

Node

dahuasecurity ipc-hdbw4x2x_firmwareRange<2019-08-18

AND

dahuasecurity ipc-hdbw4x2xMatch-

Node

dahuasecurity ipc-hdw5x2x_firmwareRange<2019-08-18

AND

dahuasecurity ipc-hdw5x2xMatch-

Node

dahuasecurity ipc-hfw5x2x_firmwareRange<2019-08-18

AND

dahuasecurity ipc-hfw5x2xMatch-

[
  {
    "product": "IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X",
    "vendor": "Dahua",
    "versions": [
      {
        "status": "affected",
        "version": "Versions which Build time before August 18 2019"
      }
    ]
  }
]

Source	Link
dahuasecurity	www.dahuasecurity.com/support/cybersecurity/details/637

21 Nov 2024 04:52Current

5.2Medium risk

Vulners AI Score5.2

CVSS 25

CVSS 3.15.3

EPSS0.0017

CWE-311