CVE-2020-9499

🗓️ 09 Apr 2020 13:19:23Reported by dahuaType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 68 Views

Some Dahua products have buffer overflow vulnerabilities. After successful login, an attacker can send a specific DDNS test command, causing device to go down

Reporter	Title	Published	Views	Family All 7
CNVD	Buffer Overflow Vulnerability in Multiple Dahua Products	10 Apr 202000:00	–	cnvd
Cvelist	CVE-2020-9499	9 Apr 202013:19	–	cvelist
EUVD	EUVD-2020-30305	7 Oct 202500:30	–	euvd
NVD	CVE-2020-9499	9 Apr 202014:15	–	nvd
Prion	Buffer overflow	9 Apr 202014:15	–	prion
RedhatCVE	CVE-2020-9499	22 May 202516:54	–	redhatcve
Tenable Nessus	Dahua Security Cameras Buffer Copy without Checking Size of Input (CVE-2020-9499)	29 Jul 202400:00	–	nessus

NVD

Node

dahuasecurity sd6al_firmwareRange<2019-12

AND

dahuasecurity sd6alMatch-

Node

dahuasecurity sd5a_firmwareRange<2019-12

AND

dahuasecurity sd5aMatch-

Node

dahuasecurity sd1a_firmwareRange<2019-12

AND

dahuasecurity sd1aMatch-

Node

dahuasecurity ptz1a_firmwareRange<2019-12

AND

dahuasecurity ptz1aMatch-

Node

dahuasecurity sd50_firmwareRange<2019-12

AND

dahuasecurity sd50Match-

Node

dahuasecurity sd52c_firmwareRange<2019-12

AND

dahuasecurity sd52cMatch-

Node

dahuasecurity ipc-hx5842h_firmwareRange<2019-12

AND

dahuasecurity ipc-hx5842hMatch-

Node

dahuasecurity ipc-hx7842h_firmwareRange<2019-12

AND

dahuasecurity ipc-hx7842hMatch-

Node

dahuasecurity ipc-hx2xxx_firmwareRange<2019-12

AND

dahuasecurity ipc-hx2xxxMatch-

Node

dahuasecurity ipc-hxxx5x4x_firmwareRange<2019-12

AND

dahuasecurity ipc-hxxx5x4xMatch-

Node

dahuasecurity n42b1p_firmwareRange<2019-12

AND

dahuasecurity n42b1pMatch-

Node

dahuasecurity n42b2p_firmwareRange<2019-12

AND

dahuasecurity n42b2pMatch-

Node

dahuasecurity n42b3p_firmwareRange<2019-12

AND

dahuasecurity n42b3pMatch-

Node

dahuasecurity n52a4p_firmwareRange<2019-12

AND

dahuasecurity n52a4pMatch-

Node

dahuasecurity n54a4p_firmwareRange<2019-12

AND

dahua n54a4pMatch-

Node

dahuasecurity n52b2p_firmwareRange<2019-12

AND

dahuasecurity n52b2pMatch-

Node

dahuasecurity n52b5p_firmwareRange<2019-12

AND

dahuasecurity n52b5pMatch-

Node

dahuasecurity n52b3p_firmwareRange<2019-12

AND

dahuasecurity n52b3pMatch-

Node

dahuasecurity n54b2p_firmwareRange<2019-12

AND

dahuasecurity n54b2pMatch-

[
  {
    "product": "IPC-HX2XXX Series,IPC-HXXX5X4X Series,IPC-HX5842H,IPC-HX7842H,NVR 5x Series,NVR 4x Series,SD6AL Series,SD5A Series,SD1A Series,PTZ1A Series,SD50/52C Series",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions which Build time before December,2019"
      }
    ]
  }
]

Source	Link
dahuasecurity	www.dahuasecurity.com/support/cybersecurity/details/727

21 Nov 2024 05:40Current

7.1High risk

Vulners AI Score7.1

CVSS 26.5

CVSS 3.17.2

EPSS0.00534

CWE-120