EUVD-2020-30307

Malware in sbrugna...

Dahua Web P2P Control Information Disclosure Vulnerability

Dahua Web P2P control is a set of Dahua product management and video viewing software from Dahua, China. A security vulnerability exists in Dahua Web P2P control. The vulnerability can be exploited by an attacker to obtain Cloud Key information, impersonate a customer to connect to the platform,...

CVE-2020-9501

Attackers can obtain Cloud Key information from the Dahua Web P2P control in specific ways. Cloud Key is used to authenticate the connection between the client tool and the platform. An attacker may use the leaked Cloud Key to impersonate the client to connect to the platform, resulting in...

CVE-2020-9501

Attackers can obtain Cloud Key information from the Dahua Web P2P control in specific ways. Cloud Key is used to authenticate the connection between the client tool and the platform. An attacker may use the leaked Cloud Key to impersonate the client to connect to the platform, resulting in...