İçeriğe atla
Noroxi

dahuasecurity kayıtları

dahuasecurity üreticisine ait 58 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
2 · %3,4
Silahlaştırılmış
3 · %5,2
Pre-auth RCE
2
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
1071 gün

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

58 kayıt
  • CVE-2021-33044
    99Hemen

    The identity authentication bypass vulnerability found in some Dahua products during the login process.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    dahuasecurity · ipc-hum7xxx firmware15 Eyl 2021

  • CVE-2021-33045
    99Hemen

    The identity authentication bypass vulnerability found in some Dahua products during the login process.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %100

    dahuasecurity · ipc-hum7xxx firmware15 Eyl 2021

  • CVE-2023-3836
    61Bu hafta

    Dahua Smart Park Management unrestricted upload

    KritikCVSS 9,8Kavram kanıtıEPSS %74

    dahuasecurity · smart parking management22 Tem 2023

  • CVE-2017-7925
    54Planlayın

    A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-I

    KritikCVSS 9,8Kavram kanıtıEPSS %51

    dahuasecurity · dh-ipc-hdbw23a0rn-zs firmware5 May 2017

  • CVE-2013-6117
    51Planlayın

    Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user cre

    YüksekCVSS 7,5SilahlaştırılmışEPSS %70

    dahuasecurity · dvr firmware11 Tem 2014

  • CVE-2017-6343
    50Planlayın

    The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29,

    YüksekCVSS 8,1İstismar yokEPSS %60

    dahuasecurity · camera firmware27 Şub 2017

  • CVE-2017-6342
    43Planlayın

    An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-0

    KritikCVSS 9,8İstismar yokEPSS %13

    dahuasecurity · camera firmware27 Şub 2017

  • CVE-2013-3612
    43Planlayın

    Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for

    KritikCVSS 10,0Kavram kanıtıEPSS %10

    dahuasecurity · dvr0404hd-a17 Eyl 2013

  • CVE-2017-3223
    41Planlayın

    Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a sta

    KritikCVSS 9,8İstismar yokEPSS %5

    dahuasecurity · ip camera firmware24 Tem 2018

  • CVE-2013-5754
    41Planlayın

    The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the role of a master passwo

    KritikCVSS 10,0İstismar yokEPSS %4

    dahuasecurity · dvr0404hd-a17 Eyl 2013

  • CVE-2017-7927
    40Planlayın

    A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-

    YüksekCVSS 7,3İstismar yokEPSS %37

    dahuasecurity · dh-ipc-hdbw23a0rn-zs firmware5 May 2017

  • CVE-2013-3614
    39İzleyin

    Dahua DVR appliances have a small value for the maximum password length, which makes it easier for remote attackers to obtain access via a b

    KritikCVSS 9,3Kavram kanıtıEPSS %7

    dahuasecurity · dvr0404hd-a17 Eyl 2013

  • CVE-2020-9502
    39İzleyin

    Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities.

    KritikCVSS 9,8İstismar yokEPSS %2

    dahuasecurity · sd6al firmware13 May 2020

  • CVE-2017-9315
    39İzleyin

    Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua autho

    KritikCVSS 9,8İstismar yokEPSS %1

    dahuasecurity · ipc-hfw1xxx firmware28 Kas 2017

  • CVE-2021-33046
    39İzleyin

    Some Dahua products have access control vulnerability in the password reset process.

    KritikCVSS 9,8İstismar yokEPSS %1

    dahuasecurity · ipc-hx1xxx firmware13 Oca 2022

  • CVE-2019-9677
    39İzleyin

    The specific fields of CGI interface of some Dahua products are not strictly verified, an attacker can cause a buffer overflow by constructi

    KritikCVSS 9,8İstismar yokEPSS %1

    dahuasecurity · ipc-hdw1x2x firmware18 Eyl 2019

  • CVE-2024-39950
    39İzleyin

    A vulnerability has been found in Dahua products.

    KritikCVSS 9,8İstismar yokEPSS %0

    dahuasecurity · nvr4104-4ks2\/l firmware31 Tem 2024

  • CVE-2017-7253
    36İzleyin

    Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1.

    YüksekCVSS 8,8İstismar yokEPSS %3

    dahuasecurity · ip camera firmware30 Mar 2017

  • CVE-2017-9317
    35İzleyin

    Privilege escalation vulnerability found in some Dahua IP devices.

    YüksekCVSS 8,8İstismar yokEPSS %1

    dahuasecurity · xvr5x16 firmware23 May 2018

  • CVE-2017-9314
    35İzleyin

    Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH_NVR5xxx_Eng_P_V2.616.0000.

    YüksekCVSS 8,8İstismar yokEPSS %1

    dahuasecurity · nvr5464-16p-4ks2 firmware13 Kas 2017

  • CVE-2019-9679
    35İzleyin

    Some of Dahua's Debug functions do not have permission separation.

    YüksekCVSS 8,8İstismar yokEPSS %1

    dahuasecurity · ipc-hdw1x2x firmware18 Eyl 2019

  • CVE-2013-3615
    33İzleyin

    Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discov

    YüksekCVSS 7,8Kavram kanıtıEPSS %8

    dahuasecurity · dvr0404hd-a17 Eyl 2013

  • CVE-2013-3613
    33İzleyin

    Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain access via vectors involvi

    YüksekCVSS 7,8Kavram kanıtıEPSS %7

    dahuasecurity · dvr0404hd-a17 Eyl 2013

  • CVE-2017-6432
    32İzleyin

    An issue was discovered on Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06 devices.

    YüksekCVSS 8,1İstismar yokEPSS %1

    dahuasecurity · nvr firmware9 Mar 2017

  • CVE-2019-9682
    32İzleyin

    Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal

    YüksekCVSS 8,1İstismar yokEPSS %1

    dahuasecurity · sd6al firmware13 May 2020