Lucene search

[email protected]CVE-2021-33046

HistoryJan 13, 2022 - 9:15 p.m.

CVE-2021-33046

2022-01-1321:15:00

CWE-287

[email protected]

web.nvd.nist.gov

dahua

access control

vulnerability

password reset

cve-2021-33046

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

61.4%

JSON

Some Dahua products have access control vulnerability in the password reset process. Attackers can exploit this vulnerability through specific deployments to reset device passwords.

CPENameOperatorVersion
dahuasecurity:ipc-hx1xxx_firmwaredahuasecurity ipc-hx1xxx firmwarele2021-7
dahuasecurity:ipc-hx2xxx_firmwaredahuasecurity ipc-hx2xxx firmwarele2021-7
dahuasecurity:ipc-hx3xxx_firmwaredahuasecurity ipc-hx3xxx firmwarele2021-7
dahuasecurity:ipc-hx5\(4\)\(3\)xxx_firmwaredahuasecurity ipc-hx5\(4\)\(3\)xxx firmwarele2021-7
dahuasecurity:ipc-hx5xxx_firmwaredahuasecurity ipc-hx5xxx firmwarele2021-7
dahuasecurity:sd1a1_firmwaredahuasecurity sd1a1 firmwarele2021-7
dahuasecurity:sd22_firmwaredahuasecurity sd22 firmwarele2021-7
dahuasecurity:sd49_firmwaredahuasecurity sd49 firmwarele2021-7
dahuasecurity:sd50_firmwaredahuasecurity sd50 firmwarele2021-7
dahuasecurity:sd52c_firmwaredahuasecurity sd52c firmwarele2021-7

CPE	Name	Operator	Version
dahuasecurity:ipc-hx1xxx_firmware	dahuasecurity ipc-hx1xxx firmware	le	2021-7
dahuasecurity:ipc-hx2xxx_firmware	dahuasecurity ipc-hx2xxx firmware	le	2021-7
dahuasecurity:ipc-hx3xxx_firmware	dahuasecurity ipc-hx3xxx firmware	le	2021-7
dahuasecurity:ipc-hx5\(4\)\(3\)xxx_firmware	dahuasecurity ipc-hx5\(4\)\(3\)xxx firmware	le	2021-7
dahuasecurity:ipc-hx5xxx_firmware	dahuasecurity ipc-hx5xxx firmware	le	2021-7
dahuasecurity:sd1a1_firmware	dahuasecurity sd1a1 firmware	le	2021-7
dahuasecurity:sd22_firmware	dahuasecurity sd22 firmware	le	2021-7
dahuasecurity:sd49_firmware	dahuasecurity sd49 firmware	le	2021-7
dahuasecurity:sd50_firmware	dahuasecurity sd50 firmware	le	2021-7
dahuasecurity:sd52c_firmware	dahuasecurity sd52c firmware	le	2021-7

Rows per page:

1-10 of 281

References

support.dahuatech.com/networkSecurity/securityDetails?id=95

www.dahuasecurity.com/support/cybersecurity/details/957

www.dahuasecurity.com/support/cybersecurity/details/987

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

61.4%

JSON

Related for CVE-2021-33046

prion1