Dahua Security Digital Video Recorders Credentials Management Errors (CVE-2013-3612)

Dahua DVR appliances have a hardcoded password for 1 the root account and 2 an unspecified backdoor account, which makes it easier for remote attackers to obtain administrative access via authorization requests involving a ActiveX, b a standalone client, or c unknown other vectors. This plugin on...

Dahua Security Network Video Recorders Improper Input Validation (CVE-2024-39946)

A vulnerability has been found in Dahua products.After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing device initialization. This plugin only works with Tenable.ot. Please visit...

Dahua Security Digital Video Recorders Credentials Management Errors (CVE-2013-3615)

Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discover cleartext passwords via a brute-force attack. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Dahua Security Digital Video Recorders Permissions, Privileges, and Access Controls (CVE-2013-5754)

The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the role of a master password, which makes it easier for remote attackers to obtain administrative access and change the administrator password via requests involving 1 ActiveX, 2 a...

Dahua Security Network Video Recorders Improper Input Validation (CVE-2024-39949)

A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Dahua Security Network Video Recorders Improper Input Validation (CVE-2024-39948)

A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Dahua Security NVR NVR50XX, NVR52XX, NVR54XX, and NVR58XX Improper Authentication (CVE-2017-9314)

Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DHNVR5xxxEngPV2.616.0000.0.R.20171102. Attacker could exploit this vulnerability to gain access to additional operations by means of forging json message. This plugin only works with...

Dahua Devices Path Traversal Vulnerability (Jan 2025) - Active Check

Multiple Dahua devices and their OEMs are prone to a path traversal vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Dahua Devices Information Disclosure Vulnerability (Jan 2025) - Active Check

Multiple Dahua devices and their OEMs are prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

CVE-2024-13131

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-9680. Reason: This candidate is a reservation duplicate of CVE-2019-9680. Notes: All CVE users should reference CVE-2019-9680 instead of this candidate. All references and descriptions in this candidate have been remov...

CVE-2024-13131

...

CVE-2024-13131

CVE-2024-13131 is rejected and should not be used; see CVE-2019-9680.

CVE-2024-13131

...

CVE-2024-13130

A vulnerability was found in Dahua IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z and IPC-HDW1200S up to 20241222. It has been rated as problematic. Affected by this issue is some unknown functionality of the file ../mtd/Config/Sha1Account1 of the component Web Interface. The manipulation leads to...

CVE-2024-13130 Dahua IPC-HFW1200S Web Interface Sha1Account1 path traversal

A vulnerability was found in Dahua IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z and IPC-HDW1200S up to 20241222. It has been rated as problematic. Affected by this issue is some unknown functionality of the file ../mtd/Config/Sha1Account1 of the component Web Interface. The manipulation leads to...

CVE-2024-13130 Dahua IPC-HFW1200S Web Interface Sha1Account1 path traversal

A vulnerability was found in Dahua IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z and IPC-HDW1200S up to 20241222. It has been rated as problematic. Affected by this issue is some unknown functionality of the file ../mtd/Config/Sha1Account1 of the component Web Interface. The manipulation leads to...

CVE-2024-13130

CVE-2024-13130 affects Dahua IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z and IPC-HDW1200S (Web Interface) up to 20241222. Root cause: manipulation of the file ../mtd/Config/Sha1Account1 enabling path traversal via the vulnerable Web Interface. Impact: potential remote access to restricted files ...

编号撤回

Dahua IPC-HFW1200S and so on are products of Dahua China.Dahua IPC-HFW1200S is a 2MP Color Monochrome Full HD Network Compact IR Bullet Camera.Dahua IPC-HFW2300R-Z is a 3MP IP Bullet Camera.Dahua IPC-HFW5220E Dahua IPC-HFW5220E-Z is a 2MP HD network IR bullet camera. This CVE number has been...

Dahua多款产品 安全漏洞

Dahua IPC-HFW1200S and others are products of Dahua China.Dahua IPC-HFW1200S is a 2MP Color Monochrome Full HD Network Compact IR Bullet Camera.Dahua IPC-HFW2300R-Z is a 3MP IP Bullet Camera.Dahua IPC-HFW5220E Dahua IPC-HFW5220E-Z is a 2MP HD network IR bullet camera. A security vulnerability...

PT-2025-2016 · Dahua · Dahua Ipc-Hfw2300R-Z +2

Name of the Vulnerable Software and Affected Versions: Dahua IPC-HFW1200S versions up to 20241222 Dahua IPC-HFW2300R-Z versions up to 20241222 Dahua IPC-HFW5220E-Z versions up to 20241222 Dahua IPC-HDW1200S versions up to 20241222 Description: A vulnerability was found in the Web Interface...