Skip to content
Noroxi

dahuasecurity records

58 published records for vendor dahuasecurity.

Researcher profile

Entered KEV
2 · 3.4%
Weaponized
3 · 5.2%
Pre-auth RCE
2
With a fix record
0%
Median publish → KEV
1071 days

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

58 records
  • CVE-2021-33044
    99Now

    The identity authentication bypass vulnerability found in some Dahua products during the login process.

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    dahuasecurity · ipc-hum7xxx firmwareSep 15, 2021

  • CVE-2021-33045
    99Now

    The identity authentication bypass vulnerability found in some Dahua products during the login process.

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    dahuasecurity · ipc-hum7xxx firmwareSep 15, 2021

  • CVE-2023-3836
    61This week

    Dahua Smart Park Management unrestricted upload

    CriticalCVSS 9.8Proof of conceptEPSS 73%

    dahuasecurity · smart parking managementJul 22, 2023

  • CVE-2017-7925
    54Plan

    A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-I

    CriticalCVSS 9.8Proof of conceptEPSS 51%

    dahuasecurity · dh-ipc-hdbw23a0rn-zs firmwareMay 5, 2017

  • CVE-2013-6117
    51Plan

    Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user cre

    HighCVSS 7.5WeaponizedEPSS 70%

    dahuasecurity · dvr firmwareJul 11, 2014

  • CVE-2017-6343
    50Plan

    The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29,

    HighCVSS 8.1No exploitEPSS 60%

    dahuasecurity · camera firmwareFeb 27, 2017

  • CVE-2017-6342
    43Plan

    An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-0

    CriticalCVSS 9.8No exploitEPSS 12%

    dahuasecurity · camera firmwareFeb 27, 2017

  • CVE-2013-3612
    43Plan

    Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    dahuasecurity · dvr0404hd-aSep 17, 2013

  • CVE-2017-3223
    41Plan

    Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a sta

    CriticalCVSS 9.8No exploitEPSS 5%

    dahuasecurity · ip camera firmwareJul 24, 2018

  • CVE-2013-5754
    41Plan

    The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the role of a master passwo

    CriticalCVSS 10.0No exploitEPSS 3%

    dahuasecurity · dvr0404hd-aSep 17, 2013

  • CVE-2017-7927
    40Plan

    A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-

    HighCVSS 7.3No exploitEPSS 36%

    dahuasecurity · dh-ipc-hdbw23a0rn-zs firmwareMay 5, 2017

  • CVE-2013-3614
    39Monitor

    Dahua DVR appliances have a small value for the maximum password length, which makes it easier for remote attackers to obtain access via a b

    CriticalCVSS 9.3Proof of conceptEPSS 7%

    dahuasecurity · dvr0404hd-aSep 17, 2013

  • CVE-2020-9502
    39Monitor

    Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities.

    CriticalCVSS 9.8No exploitEPSS 1%

    dahuasecurity · sd6al firmwareMay 13, 2020

  • CVE-2017-9315
    39Monitor

    Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua autho

    CriticalCVSS 9.8No exploitEPSS 1%

    dahuasecurity · ipc-hfw1xxx firmwareNov 28, 2017

  • CVE-2021-33046
    39Monitor

    Some Dahua products have access control vulnerability in the password reset process.

    CriticalCVSS 9.8No exploitEPSS 1%

    dahuasecurity · ipc-hx1xxx firmwareJan 13, 2022

  • CVE-2019-9677
    39Monitor

    The specific fields of CGI interface of some Dahua products are not strictly verified, an attacker can cause a buffer overflow by constructi

    CriticalCVSS 9.8No exploitEPSS 1%

    dahuasecurity · ipc-hdw1x2x firmwareSep 18, 2019

  • CVE-2024-39950
    39Monitor

    A vulnerability has been found in Dahua products.

    CriticalCVSS 9.8No exploitEPSS 0%

    dahuasecurity · nvr4104-4ks2\/l firmwareJul 31, 2024

  • CVE-2017-7253
    36Monitor

    Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1.

    HighCVSS 8.8No exploitEPSS 2%

    dahuasecurity · ip camera firmwareMar 30, 2017

  • CVE-2017-9317
    35Monitor

    Privilege escalation vulnerability found in some Dahua IP devices.

    HighCVSS 8.8No exploitEPSS 0%

    dahuasecurity · xvr5x16 firmwareMay 23, 2018

  • CVE-2017-9314
    35Monitor

    Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH_NVR5xxx_Eng_P_V2.616.0000.

    HighCVSS 8.8No exploitEPSS 0%

    dahuasecurity · nvr5464-16p-4ks2 firmwareNov 13, 2017

  • CVE-2019-9679
    35Monitor

    Some of Dahua's Debug functions do not have permission separation.

    HighCVSS 8.8No exploitEPSS 0%

    dahuasecurity · ipc-hdw1x2x firmwareSep 18, 2019

  • CVE-2013-3615
    33Monitor

    Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discov

    HighCVSS 7.8Proof of conceptEPSS 7%

    dahuasecurity · dvr0404hd-aSep 17, 2013

  • CVE-2013-3613
    33Monitor

    Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain access via vectors involvi

    HighCVSS 7.8Proof of conceptEPSS 6%

    dahuasecurity · dvr0404hd-aSep 17, 2013

  • CVE-2017-6432
    32Monitor

    An issue was discovered on Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06 devices.

    HighCVSS 8.1No exploitEPSS 0%

    dahuasecurity · nvr firmwareMar 9, 2017

  • CVE-2019-9682
    32Monitor

    Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal

    HighCVSS 8.1No exploitEPSS 0%

    dahuasecurity · sd6al firmwareMay 13, 2020