Multiple Dahua Technology products vulnerable to authentication bypass

🗓️ 18 Jan 2024 04:43:05Reported by Japan Vulnerability NotesType

jvn

jvn🔗 jvndb.jvn.jp👁 1 Views

Dahua products have an authentication bypass; update software.

Reporter	Title	Published	Views	Family All 36
githubexploit	Exploit for Improper Authentication in Dahuasecurity Ipc-Hum7Xxx_Firmware	25 Jan 202610:36	–	githubexploit
githubexploit	Exploit for Improper Authentication in Dahuasecurity Ipc-Hum7Xxx_Firmware	11 Oct 202122:08	–	githubexploit
githubexploit	Exploit for Improper Authentication in Dahuasecurity Ipc-Hum7Xxx_Firmware	22 Oct 202314:02	–	githubexploit
githubexploit	Ingram-Pro	25 Jun 202608:08	–	githubexploit
githubexploit	Exploit for Improper Authentication in Dahuasecurity Ipc-Hum7Xxx_Firmware	24 Jun 202612:31	–	githubexploit
githubexploit	Exploit for Improper Authentication in Dahuasecurity Ipc-Hum7Xxx_Firmware	7 Mar 201723:48	–	githubexploit
githubexploit	Exploit for Improper Authentication in Dahuasecurity Ipc-Hum7Xxx_Firmware	3 Mar 202621:28	–	githubexploit
zdt	Dahua Authentication Bypass Vulnerability	6 Oct 202100:00	–	zdt
gitee	Exploit for Improper Authentication in Dahuasecurity Ipc-Hum7Xxx_Firmware	6 Jul 202502:39	–	gitee
gitee	Exploit for Improper Authentication in Dahuasecurity Ipc-Hum7Xxx_Firmware	22 Nov 202110:46	–	gitee

Source	Link
dahuasecurity	www.dahuasecurity.com/aboutUs/trustedCenter/details/582
cve	www.cve.org/CVERecord
jvn	www.jvn.jp/en/jp/JVN83655695/index.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-33044
ipa	www.ipa.go.jp/en/security/vulnerabilities/cwe.html

11 Jul 2024 07:10Current

6.8Medium risk

Vulners AI Score6.8

CVSS 27.6 - 10

CVSS 38.1

CVSS 3.19.8

EPSS0.99871

SSVC

Dahua Technology authentication bypass CWE 287 remote attack identity verification software update