CVE-2020-9502

Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities. During normal user access, an attacker can use the predicted Session ID to construct a data packet to attack the device...

CVE-2020-9502

CVE-2020-9502 affects some Dahua products built before December 2019 where Session IDs are predictable. This allows an attacker, with network access and no authentication or user interaction, to craft data packets to target devices. The available documents consistently describe the issue as predi...

CVE-2020-9502

Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities. During normal user access, an attacker can use the predicted Session ID to construct a data packet to attack the device...

CVE-2020-9501

Summary: CVE-2020-9501 concerns a vulnerability in the Dahua Web P2P control where attackers can obtain the Cloud Key, which authenticates the client–platform connection. A leaked Cloud Key could allow an attacker to impersonate the client and cause increased consumption of platform server resour...

CVE-2019-9682

Vulnerability overview (CVE-2019-9682) : Dahua devices built before December 2019 retain a weak security login mode for compatibility with older devices. When users enable/use this weak login, an attacker on the same network can monitor traffic and intercept packets to attack the device. Impact i...

CVE-2019-9682

Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak security login mode that users can control. If the user uses a weak security login method, an attacker c...

PT-2020-11365

Name of the Vulnerable Software and Affected Versions Dahua devices with Build time before December 2019 Description The issue concerns Dahua devices that use a weak security login mode for compatibility with earlier devices. If a user employs this weak security login method, an attacker can...

PT-2020-20705

Name of the Vulnerable Software and Affected Versions Dahua products with Build time before December 2019 Description The issue concerns a predictable Session ID vulnerability. During normal user access, an attacker can exploit this by predicting the Session ID to construct a malicious data packe...

CVE-2020-9501: Undefined Security Weakness

Attackers can obtain Cloud Key information from the Dahua Web P2P control in specific ways. Cloud Key is used to authenticate the connection between the client tool and the platform. An attacker may use the leaked Cloud Key to impersonate the client to connect to the platform, resulting in...

PT-2020-20704

Name of the Vulnerable Software and Affected Versions Dahua Web P2P control versions with Build time before April 2020 Description The issue allows attackers to obtain Cloud Key information from the Dahua Web P2P control, which is used to authenticate the connection between the client tool and th...

CVE-2020-9502: Use of Insufficiently Random Values

Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities. During normal user access, an attacker can use the predicted Session ID to construct a data packet to attack the device...

CVE-2019-9682: Incorrect Default Permissions

Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal login of early devices, some devices retain the weak security login mode that users can control. If the user uses a weak security login method, an attacker c...

Buffer Overflow Vulnerability in Multiple Dahua Products

Dahua SD6AL Series and so on are the products of Dahua, China.SD6AL Series is a network camera of SD6AL series.NVR 5x Series is a network video recorder of 5x series.IPC-HX2XXX Series is a network camera of IPC-HX2XXX series.NVR 5x Series is a network video recorder of 5x series.NVR 5x Series is ...

Multiple Dahua Products Input Validation Error Vulnerability (CNVD-2020-22980)

Dahua SD6AL Series and so on are the products of Dahua, China.SD6AL Series is a network camera of SD6AL series.NVR 5x Series is a network video recorder of 5x series.IPC-HX2XXX Series is a network camera of IPC-HX2XXX series.NVR 5x Series is a network video recorder of 5x series.NVR 5x Series is ...

CVE-2020-9499

Some Dahua products have buffer overflow vulnerabilities. After the successful login of the legal account, the attacker sends a specific DDNS test command, which may cause the device to go down...

CVE-2020-9500

Some products of Dahua have Denial of Service vulnerabilities. After the successful login of the legal account, the attacker sends a specific log query command, which may cause the device to go down...

CVE-2020-9499

Some Dahua products have buffer overflow vulnerabilities. After the successful login of the legal account, the attacker sends a specific DDNS test command, which may cause the device to go down...

CVE-2020-9500

Some products of Dahua have Denial of Service vulnerabilities. After the successful login of the legal account, the attacker sends a specific log query command, which may cause the device to go down...

Buffer overflow

Some Dahua products have buffer overflow vulnerabilities. After the successful login of the legal account, the attacker sends a specific DDNS test command, which may cause the device to go down...

CVE-2020-9500

Some products of Dahua have Denial of Service vulnerabilities. After the successful login of the legal account, the attacker sends a specific log query command, which may cause the device to go down...