CVE-2020-9502

🗓️ 13 May 2020 15:21:12Reported by dahuaType

Some Dahua products have predictable Session ID vulnerabilities pre-December 2019

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2020-9502	13 May 202015:21	–	cvelist
EUVD	EUVD-2020-30308	7 Oct 202500:30	–	euvd
NVD	CVE-2020-9502	13 May 202016:15	–	nvd
Prion	Code injection	13 May 202016:15	–	prion
RedhatCVE	CVE-2020-9502	22 May 202517:34	–	redhatcve
Tenable Nessus	Dahua Security Cameras Use of Insufficiently Random Values (CVE-2020-9502)	29 Jul 202400:00	–	nessus

NVD

Node

dahuasecurity sd6al_firmwareRange<2019-12

AND

dahuasecurity sd6alMatch-

Node

dahuasecurity sd5a_firmwareRange<2019-12

AND

dahuasecurity sd5aMatch-

Node

dahuasecurity sd1a_firmwareRange<2019-12

AND

dahuasecurity sd1aMatch-

Node

dahuasecurity ptz1a_firmwareRange<2019-12

AND

dahuasecurity ptz1aMatch-

Node

dahuasecurity sd50_firmwareRange<2019-12

AND

dahuasecurity sd50Match-

Node

dahuasecurity sd52c_firmwareRange<2019-12

AND

dahuasecurity sd52cMatch-

Node

dahuasecurity ipc-hx5842h_firmwareRange<2019-12

AND

dahuasecurity ipc-hx5842hMatch-

Node

dahuasecurity ipc-hx7842h_firmwareRange<2019-12

AND

dahuasecurity ipc-hx7842hMatch-

Node

dahuasecurity ipc-hx2xxx_firmwareRange<2019-12

AND

dahuasecurity ipc-hx2xxxMatch-

Node

dahuasecurity ipc-hxxx5x4x_firmwareRange<2019-12

AND

dahuasecurity ipc-hxxx5x4xMatch-

Node

dahuasecurity n42b1p_firmwareRange<2019-12

AND

dahuasecurity n42b1pMatch-

Node

dahuasecurity n42b2p_firmwareRange<2019-12

AND

dahuasecurity n42b2pMatch-

Node

dahuasecurity n42b3p_firmwareRange<2019-12

AND

dahuasecurity n42b3pMatch-

Node

dahuasecurity n52a4p_firmwareRange<2019-12

AND

dahuasecurity n52a4pMatch-

Node

dahuasecurity n54a4p_firmwareRange<2019-12

AND

dahuasecurity n54a4pMatch-

Node

dahuasecurity n52b2p_firmwareRange<2019-12

AND

dahuasecurity n52b2pMatch-

Node

dahuasecurity n52b5p_firmwareRange<2019-12

AND

dahuasecurity n52b5pMatch-

Node

dahuasecurity n52b3p_firmwareRange<2019-12

AND

dahuasecurity n52b3pMatch-

Node

dahuasecurity n54b2p_firmwareRange<2019-12

AND

dahuasecurity n54b2pMatch-

Node

dahuasecurity ipc-hdbw1320e-w_firmwareRange<2019-12

AND

dahuasecurity ipc-hdbw1320e-wMatch-

[
  {
    "product": "IPC-HX2XXX Series,IPC-HXXX5X4X Series,IPC-HX5842H,IPC-HX7842H,NVR 5x Series,NVR 4x Series,SD6AL Series,SD5A Series,SD1A Series,PTZ1A Series,SD50/52C Series,IPC-HFW1431S",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions which Build time before December,2019"
      }
    ]
  }
]

Source	Link
dahuasecurity	www.dahuasecurity.com/support/cybersecurity/details/777

21 Nov 2024 05:40Current

9.2High risk

Vulners AI Score9.2

CVSS 27.5

CVSS 3.19.8

EPSS0.00604

CWE-330

dahua cve-2020-9502 session id predictable vulnerability nvd