CVE-2021-33046

🗓️ 13 Jan 2022 20:27:13Reported by dahuaType

Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2021-33046	5 Mar 202212:49	–	circl
CNNVD	多款Dahua产品授权问题漏洞	13 Jan 202200:00	–	cnnvd
Cvelist	CVE-2021-33046	13 Jan 202220:27	–	cvelist
EUVD	EUVD-2021-19761	7 Oct 202500:30	–	euvd
NVD	CVE-2021-33046	13 Jan 202221:15	–	nvd
Prion	Design/Logic Flaw	13 Jan 202221:15	–	prion
RedhatCVE	CVE-2021-33046	9 Jan 202611:28	–	redhatcve
Tenable Nessus	Dahua Security Cameras Improper Authentication (CVE-2021-33046)	29 Jul 202400:00	–	nessus

NVD

Node

dahuasecurity ipc-hx1xxx_firmwareRange2017-7–2021-7

AND

dahuasecurity ipc-hx1xxxMatch-

Node

dahuasecurity ipc-hx2xxx_firmwareRange2017-7–2021-7

AND

dahuasecurity ipc-hx2xxxMatch-

Node

dahuasecurity ipc-hx3xxx_firmwareRange2017-7–2021-7

AND

dahuasecurity ipc-hx3xxxMatch-

Node

dahuasecurity ipc-hx5(4)(3)xxx_firmwareRange2017-7–2021-7

AND

dahuasecurity ipc-hx5(4)(3)xxxMatch-

Node

dahuasecurity ipc-hx5xxx_firmwareRange2017-7–2021-7

AND

dahuasecurity ipc-hx5xxxMatch-

Node

dahuasecurity sd1a1_firmwareRange2017-7–2021-7

AND

dahuasecurity sd1a1Match-

Node

dahuasecurity sd22_firmwareRange2017-7–2021-7

AND

dahuasecurity sd22Match-

Node

dahuasecurity sd49_firmwareRange2017-7–2021-7

AND

dahuasecurity sd49Match-

Node

dahuasecurity sd50_firmwareRange2017-7–2021-7

AND

dahuasecurity sd50Match-

Node

dahuasecurity sd52c_firmwareRange2017-7–2021-7

AND

dahuasecurity sd52cMatch-

Node

dahuasecurity sd6al_firmwareRange2017-7–2021-7

AND

dahuasecurity sd6alMatch-

Node

dahuasecurity tpc-bf1241_firmwareRange2017-7–2021-7

AND

dahuasecurity tpc-bf1241Match-

Node

dahuasecurity tpc-bf2221_firmwareRange2017-7–2021-7

AND

dahuasecurity tpc-bf2221Match-

Node

dahuasecurity tpc-bf5x01_firmwareRange2017-7–2021-7

AND

dahuasecurity tpc-bf5x01Match-

Node

dahuasecurity tpc-pt8x21x_firmwareRange2017-7–2021-7

AND

dahuasecurity tpc-pt8x21xMatch-

Node

dahuasecurity tpc-sd2221_firmwareRange2017-7–2021-7

AND

dahuasecurity tpc-sd2221Match-

Node

dahuasecurity tpc-sd8x21_firmwareRange2017-7–2021-7

AND

dahuasecurity tpc-sd8x21Match-

Node

dahuasecurity nvr1xxx_firmwareRange2017-7–2021-7

AND

dahuasecurity nvr1xxxMatch-

Node

dahuasecurity nvr2xxx_firmwareRange2017-7–2021-7

AND

dahuasecurity nvr2xxxMatch-

Node

dahuasecurity nvr4xxx_firmwareRange2017-7–2021-7

AND

dahuasecurity nvr4xxxMatch-

Node

dahuasecurity nvr5xxx_firmwareRange2017-7–2021-7

AND

dahuasecurity nvr5xxxMatch-

Node

dahuasecurity xvr4xxx_firmwareRange2017-7–2021-7

AND

dahuasecurity xvr4xxxMatch-

Node

dahuasecurity xvr5xxx_firmwareRange2017-7–2021-7

AND

dahuasecurity xvr5xxxMatch-

Node

dahuasecurity xvr7xxx_firmwareRange2017-7–2021-7

AND

dahuasecurity xvr7xxxMatch-

Node

dahuasecurity hcvr7xxx_firmwareRange2017-7–2021-7

AND

dahuasecurity hcvr7xxxMatch-

Node

dahuasecurity hcvr8xxx_firmwareRange2017-7–2021-7

AND

dahuasecurity hcvr8xxxMatch-

Node

dahuasecurity vtox20xf_firmwareRange2017-7–2021-7

AND

dahuasecurity vtox20xfMatch-

Node

dahuasecurity asc2204c_firmwareRange2017-7–2021-7

AND

dahuasecurity asc2204cMatch-

[
  {
    "product": "Access control vulnerability found in some Dahua products",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Dahua IP Camera devices IPC-HX3XXX, and IPC-HX5XXX"
      },
      {
        "status": "affected",
        "version": "PTZ Dome Camera SD1A1, SD22, SD49, SD50, SD52C, and SD6AL"
      },
      {
        "status": "affected",
        "version": "Thermal TPC-BF1241,TPC-BF2221, TPC-SD2221"
      },
      {
        "status": "affected",
        "version": "VTO2101E, VTOX221E, and ASC2204C devices Buildtime between 2017/7 ~ 2021/7.  NVR devices NVR4XXX, and NVR5XXX"
      },
      {
        "status": "affected",
        "version": "XVR devices XVR4XXX, and XVR5XXX"
      },
      {
        "status": "affected",
        "version": "HCVR devices HCVR7XXX, and HCVR8XXX devices Buildtime between 2017/1 ~ 2021/7."
      }
    ]
  }
]

Source	Link
dahuasecurity	www.dahuasecurity.com/support/cybersecurity/details/957
support	www.support.dahuatech.com/networkSecurity/securityDetails
dahuasecurity	www.dahuasecurity.com/support/cybersecurity/details/987

21 Nov 2024 06:08Current

9.4High risk

Vulners AI Score9.4

CVSS 27.5

CVSS 3.19.8

EPSS0.00502

CWE-287