Dahua IPC/VTH/VTO - Authentication Bypass

Some Dahua products contain an authentication bypass during the login process. Attackers can bypass device identity authentication by constructing malicious data packets. id: CVE-2021-33044 info: name: Dahua IPC/VTH/VTO - Authentication Bypass author: gy741 severity: critical description: Some...

Dahua Security Cameras Buffer Copy without Checking Size of Input (CVE-2019-9677)

The specific fields of CGI interface of some Dahua products are not strictly verified, an attacker can cause a buffer overflow by constructing malicious packets. Affected products include: IPC- HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC- HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X...

Dahua Security Cameras Improper Access Control (CVE-2017-9317)

Privilege escalation vulnerability found in some Dahua IP devices. Attacker in possession of low privilege account can gain access to credential information of high privilege account and further obtain device information or attack the device. This plugin only works with Tenable.ot. Please visit...

Dahua Security Cameras Incorrect Default Permissions (CVE-2019-9679)

Some of Dahua's Debug functions do not have permission separation. Low-privileged users can use the Debug function after logging in. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC- HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build ti...

Exploit for Unrestricted Upload of File with Dangerous Type in Dahuasecurity Smart_Parking_Management

Dahua Smart Park Comprehensive Management Platform: Publishin...

Dahuasecurity Smartpss Firmware Authentication Bypass (CVE-2017-6343)

An authentication bypass vulnerability exists in Dahuasecurity Smartpss Firmware. Successful exploitation of this vulnerability would allow remote attackers to gain unauthorized access into the affected system...