CVE-2021-33045

🗓️ 15 Sep 2021 21:50:08Reported by dahuaType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 505 Views

CVE-2021-33045: Identity authentication bypass vulnerability in Dahua products

Reporter	Title	Published	Views	Family All 29
GithubExploit	Exploit for Improper Authentication in Dahuasecurity Ipc-Hum7Xxx_Firmware	11 Oct 202122:08	–	githubexploit
GithubExploit	Ingram-Pro	25 Jun 202608:08	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Dahuasecurity Ipc-Hum7Xxx_Firmware	24 Jun 202612:31	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Dahuasecurity Ipc-Hum7Xxx_Firmware	7 Mar 201723:48	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Dahuasecurity Ipc-Hum7Xxx_Firmware	3 Mar 202621:28	–	githubexploit
0day.today	Dahua Authentication Bypass Vulnerability	6 Oct 202100:00	–	zdt
Gitee	Exploit for Improper Authentication in Dahuasecurity Ipc-Hum7Xxx_Firmware	6 Jul 202502:39	–	gitee
ICS	Russian Military Cyber Actors Target US and Global Critical Infrastructure	5 Sep 202412:00	–	ics
ATTACKERKB	CVE-2021-33044	15 Sep 202100:00	–	attackerkb
ATTACKERKB	CVE-2021-33045	15 Sep 202100:00	–	attackerkb

NVD

Node

dahuasecurity ipc-hum7xxx_firmwareRange<2.820.0000000.5.r.210705

AND

dahuasecurity ipc-hum7xxxMatch-

Node

dahuasecurity ipc-hx3xxx_firmwareRange<2.800.0000000.29.r.210630

AND

dahuasecurity ipc-hx3xxxMatch-

Node

dahuasecurity ipc-hx5xxx_firmwareRange<2.820.0000000.5.r.210705

AND

dahuasecurity ipc-hx5xxxMatch-

Node

dahuasecurity nvr-1xxx_firmwareRange<4.001.0000005.1.r.210709

AND

dahuasecurity nvr-1xxxMatch-

Node

dahuasecurity nvr-2xxx_firmwareRange<4.001.0000000.1.r.210710

AND

dahuasecurity nvr-2xxxMatch-

Node

dahuasecurity nvr-4xxx_firmwareRange<4.001.0000005.1.r.210713

AND

dahuasecurity nvr-4xxxMatch-

Node

dahuasecurity nvr-5xxx_firmwareRange<4.001.0000000.0.r.210710

AND

dahuasecurity nvr-5xxxMatch-

Node

dahuasecurity nvr-6xx_firmwareRange<4.001.0000001.1.r.210716

AND

dahuasecurity nvr-6xxMatch-

Node

dahuasecurity vth-542xh_firmwareRange<4.500.0000002.0.r.210715

AND

dahuasecurity vth-542xhMatch-

Node

dahuasecurity vto-65xxx_firmwareRange<4.300.0000004.0.r.210715

AND

dahuasecurity vto-65xxxMatch-

Node

dahuasecurity vto-75x95x_firmwareRange<4.300.0000003.0.r.210714

AND

dahuasecurity vto-75x95xMatch-

Node

dahuasecurity xvr-4x04_firmwareMatch-

AND

dahuasecurity xvr-4x04Match-

Node

dahuasecurity xvr-4x08_firmwareRange<4.001.0000001.1.r.210709

AND

dahuasecurity xvr-4x08Match-

Node

dahuasecurity xvr-4x04_firmwareRange<4.001.0000001.1.r.210709

AND

dahuasecurity xvr-4x04Match-

Node

dahuasecurity xvr-5x04_firmwareRange<4.001.0000003.1.r.210710

AND

dahuasecurity xvr-5x04Match-

Node

dahuasecurity xvr-5x08_firmwareRange<4.001.0000003.1.r.210710

AND

dahuasecurity xvr-5x08Match-

Node

dahuasecurity xvr-5x16_firmwareRange<4.001.0000003.1.r.210710

AND

dahuasecurity xvr-5x16Match-

Node

dahuasecurity xvr-7x16_firmwareRange<4.001.0000003.1.r.210710

AND

dahuasecurity xvr-7x16Match-

Node

dahuasecurity xvr-7x32_firmwareRange<4.001.0000003.1.r.210710

AND

dahuasecurity xvr-7x32Match-

[
  {
    "product": "Some Dahua IP Camera, Video Intercom, NVR, XVR devices",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Dahua IP Camera devices IPC-HX3XXX, IPC-HX5XXX, and IPC-HUM7XXX Buildtime before May, 2020, Video Intercom devices VTO75X95X, VTO65XXX, and VTH542XH, NVR devices NVR1XXX, NVR2XXX, NVR5XXX, and NVR6XX, XVR devices XVR4xxx, XVR5xxx, and XVR7xxx Buildtime before December, 2019."
      }
    ]
  }
]

Source	Link
seclists	www.seclists.org/fulldisclosure/2021/Oct/13
packetstormsecurity	www.packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.html
dahuasecurity	www.dahuasecurity.com/support/cybersecurity/details/957
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

17 Jun 2026 03:54Current

9.5High risk

Vulners AI Score9.5

CVSS 3.19.8

CVSS 210

EPSS0.99556

SSVC