Lucene search

K
cvelistDahuaCVELIST:CVE-2024-39950
HistoryJul 31, 2024 - 3:45 a.m.

CVE-2024-39950

2024-07-3103:45:12
dahua
www.cve.org
5
vulnerability
dahua products
attackers
device initialization
crafted data packets

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

EPSS

0.001

Percentile

39.0%

A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities to initiate device initialization.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "NVR4XXX and IPC-HX8XXX",
    "vendor": "Dahua",
    "versions": [
      {
        "status": "affected",
        "version": "NVR4XXX and IPC-HX8XXX Versions which Build timeΒ before 2024/1/22"
      }
    ]
  }
]

CVSS3

8.6

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

EPSS

0.001

Percentile

39.0%

Related for CVELIST:CVE-2024-39950