CVE-2021-33044

🗓️ 15 Sep 2021 21:36:04Reported by dahuaType

Dahua products identity authentication bypass vulnerability

Reporter	Title	Published	Views	Family All 34
GithubExploit	Exploit for Improper Authentication in Dahuasecurity Ipc-Hum7Xxx_Firmware	25 Jan 202610:36	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Dahuasecurity Ipc-Hum7Xxx_Firmware	11 Oct 202122:08	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Dahuasecurity Ipc-Hum7Xxx_Firmware	22 Oct 202314:02	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Dahuasecurity Ipc-Hum7Xxx_Firmware	7 Mar 201723:48	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Dahuasecurity Ipc-Hum7Xxx_Firmware	3 Mar 202621:28	–	githubexploit
0day.today	Dahua Authentication Bypass Vulnerability	6 Oct 202100:00	–	zdt
Gitee	Exploit for Improper Authentication in Dahuasecurity Ipc-Hum7Xxx_Firmware	6 Jul 202502:39	–	gitee
Gitee	Exploit for Improper Authentication in Dahuasecurity Ipc-Hum7Xxx_Firmware	22 Nov 202110:46	–	gitee
ICS	Russian Military Cyber Actors Target US and Global Critical Infrastructure	5 Sep 202412:00	–	ics
ATTACKERKB	CVE-2021-33044	15 Sep 202100:00	–	attackerkb

[
  {
    "product": "Some Dahua IP Camera, Video Intercom, PTZ Dome Camera, Thermal Camera devices",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Dahua IP Camera devices IPC-HX3XXX, IPC-HX5XXX, and IPC-HUM7XXX, Video Intercom devices VTO75X95X, VTO65XXX, and VTH542XH, PTZ Dome Camera SD1A1, SD22, SD49, SD50, SD52C, and SD6AL, Thermal TPC-BF1241, TPC-BF2221, TPC-SD2221, TPC-BF5XXX, TPC-SD8X21, and TPC-PT8X21B devices Buildtime before June, 2021."
      }
    ]
  }
]

Source	Link
seclists	www.seclists.org/fulldisclosure/2021/Oct/13
packetstormsecurity	www.packetstormsecurity.com/files/164423/Dahua-Authentication-Bypass.html
dahuasecurity	www.dahuasecurity.com/support/cybersecurity/details/957

06 Oct 2021 16:06Current

9.9High risk

Vulners AI Score9.9

EPSS0.99871