CVE-2021-33046

🗓️ 13 Jan 2022 20:27:13Reported by dahuaType

Dahua products access control vulnerability in password reset process

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2021-33046	5 Mar 202212:49	–	circl
CNNVD	多款Dahua产品授权问题漏洞	13 Jan 202200:00	–	cnnvd
CVE	CVE-2021-33046	13 Jan 202220:27	–	cve
EUVD	EUVD-2021-19761	7 Oct 202500:30	–	euvd
NVD	CVE-2021-33046	13 Jan 202221:15	–	nvd
Prion	Design/Logic Flaw	13 Jan 202221:15	–	prion
RedhatCVE	CVE-2021-33046	9 Jan 202611:28	–	redhatcve
Tenable Nessus	Dahua Security Cameras Improper Authentication (CVE-2021-33046)	29 Jul 202400:00	–	nessus

[
  {
    "product": "Access control vulnerability found in some Dahua products",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Dahua IP Camera devices IPC-HX3XXX, and IPC-HX5XXX"
      },
      {
        "status": "affected",
        "version": "PTZ Dome Camera SD1A1, SD22, SD49, SD50, SD52C, and SD6AL"
      },
      {
        "status": "affected",
        "version": "Thermal TPC-BF1241,TPC-BF2221, TPC-SD2221"
      },
      {
        "status": "affected",
        "version": "VTO2101E, VTOX221E, and ASC2204C devices Buildtime between 2017/7 ~ 2021/7.  NVR devices NVR4XXX, and NVR5XXX"
      },
      {
        "status": "affected",
        "version": "XVR devices XVR4XXX, and XVR5XXX"
      },
      {
        "status": "affected",
        "version": "HCVR devices HCVR7XXX, and HCVR8XXX devices Buildtime between 2017/1 ~ 2021/7."
      }
    ]
  }
]

Source	Link
support	www.support.dahuatech.com/networkSecurity/securityDetails
dahuasecurity	www.dahuasecurity.com/support/cybersecurity/details/987
dahuasecurity	www.dahuasecurity.com/support/cybersecurity/details/957

14 Jan 2022 18:49Current

9.7High risk

Vulners AI Score9.7

EPSS0.01296