SQL injection vulnerability in the anti-evasion platform of Zhejiang Dahua Technology Co. Ltd. for medical treatment outside the company (CNVD-2021-15965)

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A SQL injection vulnerability exists in the anti-evasion platform of Zhejiang Dahua Technology Co., Ltd. that can be exploited by attackers to obtain sensitive information fro...

Unauthorized Access Vulnerability in ELYCN Recording and Broadcasting Platform of Zhejiang Dahua Technology Co.(CNVD-2021-15563)

DAHUA is a leading video-based intelligent IOT solution provider and operation service provider in the world. An unauthorized access vulnerability exists in the ELYCN recording and broadcasting platform of Zhejiang Dahua Technology Company Limited, which can be exploited by attackers to modify...

SQL Injection Vulnerability in the Anti-Desertion Platform of Zhejiang Dahua Technology Co. Ltd. for Medical Treatment Outside the Company (CNVD-2021-03460)

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A SQL injection vulnerability exists in the anti-evasion platform of Zhejiang Dahua Technology Co. An attacker can exploit the vulnerability to obtain sensitive information in...

SQL Injection Vulnerability in DSS Safe City System of Zhejiang Dahua Technology Co.(CNVD-2021-01865)

Zhejiang Dahua Technology Co., Ltd. is a supplier of surveillance products and solution service provider. DSS Safe City System of Zhejiang Dahua Technology Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in DSS Safe City System of Zhejiang Dahua Technology Co.(CNVD-2020-75024)

Zhejiang Dahua Technology Co., Ltd, is the world's leading video-centered intelligent IOT solution provider and operation service provider, providing end-to-end video surveillance solutions, systems and services for city operations and more. A SQL injection vulnerability exists in the DSS Safe Ci...

SQL Injection Vulnerability in DSS Safe City System of Zhejiang Dahua Technology Co.(CNVD-2020-75025)

Zhejiang Dahua Technology Co., Ltd, is the world's leading video-centered intelligent IOT solution provider and operation service provider, providing end-to-end video surveillance solutions, systems and services for city operations and more. A SQL injection vulnerability exists in the DSS Safe Ci...

File Upload Vulnerability in DSS Safe City System of Zhejiang Dahua Technology Co.

Zhejiang Dahua Technology Co., Ltd, is the world's leading video-centered intelligent IOT solution provider and operation service provider, providing end-to-end video surveillance solutions, systems and services for city operations and more. A file upload vulnerability exists in the DSS Safe City...

SQL Injection Vulnerability in DSS Safe City System of Zhejiang Dahua Technology Co.

Zhejiang Dahua Technology Co., Ltd, is the world's leading video-centered intelligent IOT solution provider and operation service provider, providing end-to-end video surveillance solutions, systems and services for city operations and more. A SQL injection vulnerability exists in the DSS Safe Ci...

DLL Hijacking Vulnerability in Dahua Player

Zhejiang Dahua Technology Co., Ltd. is a leading supplier and solution provider of surveillance products. DLL hijacking vulnerability exists in Dahua Player, which can be exploited by attackers to load malicious dll and execute malicious code...

Dahua Network Keyboard and Face All-in-One Mainframe with Information Leakage Vulnerability

DH-NHB5000 is a new generation of full-touch network keyboard designed and developed by Dahua Corporation. An information leakage vulnerability exists in the Dahua Network Keyboard and Face All-in-One Host. An attacker can exploit the vulnerability to bypass authentication to obtain sensitive...

Dahua Web P2P Control Information Disclosure Vulnerability

Dahua Web P2P control is a set of Dahua product management and video viewing software from Dahua, China. A security vulnerability exists in Dahua Web P2P control. The vulnerability can be exploited by an attacker to obtain Cloud Key information, impersonate a customer to connect to the platform,...

CVE-2020-9502

Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities. During normal user access, an attacker can use the predicted Session ID to construct a data packet to attack the device...

CVE-2020-9501

Attackers can obtain Cloud Key information from the Dahua Web P2P control in specific ways. Cloud Key is used to authenticate the connection between the client tool and the platform. An attacker may use the leaked Cloud Key to impersonate the client to connect to the platform, resulting in...

CVE-2020-9502

Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities. During normal user access, an attacker can use the predicted Session ID to construct a data packet to attack the device...

CVE-2020-9501

Attackers can obtain Cloud Key information from the Dahua Web P2P control in specific ways. Cloud Key is used to authenticate the connection between the client tool and the platform. An attacker may use the leaked Cloud Key to impersonate the client to connect to the platform, resulting in...

CVE-2019-9682

Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak security login mode that users can control. If the user uses a weak security login method, an attacker c...

CVE-2019-9682

Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak security login mode that users can control. If the user uses a weak security login method, an attacker c...

Information disclosure

Attackers can obtain Cloud Key information from the Dahua Web P2P control in specific ways. Cloud Key is used to authenticate the connection between the client tool and the platform. An attacker may use the leaked Cloud Key to impersonate the client to connect to the platform, resulting in...

CVE-2020-9501

Attackers can obtain Cloud Key information from the Dahua Web P2P control in specific ways. Cloud Key is used to authenticate the connection between the client tool and the platform. An attacker may use the leaked Cloud Key to impersonate the client to connect to the platform, resulting in...

Code injection

Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities. During normal user access, an attacker can use the predicted Session ID to construct a data packet to attack the device...