Записи dahuasecurity
58 опубликованных записей вендора dahuasecurity.
Профиль для исследователя
- Попали в KEV
- 2 · 3,4 %
- С эксплойтом
- 3 · 5,2 %
- Pre-auth RCE
- 2
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- 1071 дн.
Повторяющиеся классы
- CWE-287 Improper Authentication8
- CWE-306 Missing Authentication for Critical Function4
- CWE-284 Improper Access Control3
- CWE-121 Stack-based Buffer Overflow2
- CWE-255 Credentials Management Errors2
- CWE-264 Permissions, Privileges, and Access Controls2
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
58 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
99Срочно | CVE-2021-33044Готовый эксплойт | The identity authentication bypass vulnerability found in some Dahua products during the login process.dahuasecurity · ipc-hum7xxx firmware · CWE-287 | Критическая9,8 | KEV | 99,9 % | 15 сент. 2021 г. |
99Срочно | CVE-2021-33045Готовый эксплойт | The identity authentication bypass vulnerability found in some Dahua products during the login process.dahuasecurity · ipc-hum7xxx firmware · CWE-287 | Критическая9,8 | KEV | 99,5 % | 15 сент. 2021 г. |
61На этой неделе | CVE-2023-3836Proof of concept | Dahua Smart Park Management unrestricted uploaddahuasecurity · smart parking management · CWE-434 | Критическая9,8 | — | 73,6 % | 22 июл. 2023 г. |
54В плане | CVE-2017-7925Proof of concept | A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-Idahuasecurity · dh-ipc-hdbw23a0rn-zs firmware · CWE-260 | Критическая9,8 | — | 51,4 % | 5 мая 2017 г. |
51В плане | CVE-2013-6117Готовый эксплойт | Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user credahuasecurity · dvr firmware · CWE-287 | Высокая7,5 | — | 70,3 % | 11 июл. 2014 г. |
50В плане | CVE-2017-6343Эксплойта нет | The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29, dahuasecurity · camera firmware · CWE-287 | Высокая8,1 | — | 60,3 % | 27 февр. 2017 г. |
43В плане | CVE-2017-6342Эксплойта нет | An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-0dahuasecurity · camera firmware · CWE-269 | Критическая9,8 | — | 12,7 % | 27 февр. 2017 г. |
43В плане | CVE-2013-3612Proof of concept | Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier fordahuasecurity · dvr0404hd-a · CWE-255 | Критическая10,0 | — | 10,2 % | 17 сент. 2013 г. |
41В плане | CVE-2017-3223Эксплойта нет | Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a stadahuasecurity · ip camera firmware · CWE-121 | Критическая9,8 | — | 5,2 % | 24 июл. 2018 г. |
41В плане | CVE-2013-5754Эксплойта нет | The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the role of a master passwodahuasecurity · dvr0404hd-a · CWE-264 | Критическая10,0 | — | 3,5 % | 17 сент. 2013 г. |
40В плане | CVE-2017-7927Эксплойта нет | A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-dahuasecurity · dh-ipc-hdbw23a0rn-zs firmware · CWE-836 | Высокая7,3 | — | 36,7 % | 5 мая 2017 г. |
39Наблюдать | CVE-2013-3614Proof of concept | Dahua DVR appliances have a small value for the maximum password length, which makes it easier for remote attackers to obtain access via a bdahuasecurity · dvr0404hd-a · CWE-264 | Критическая9,3 | — | 7,0 % | 17 сент. 2013 г. |
39Наблюдать | CVE-2020-9502Эксплойта нет | Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities.dahuasecurity · sd6al firmware · CWE-330 | Критическая9,8 | — | 1,5 % | 13 мая 2020 г. |
39Наблюдать | CVE-2017-9315Эксплойта нет | Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authodahuasecurity · ipc-hfw1xxx firmware | Критическая9,8 | — | 1,4 % | 28 нояб. 2017 г. |
39Наблюдать | CVE-2021-33046Эксплойта нет | Some Dahua products have access control vulnerability in the password reset process.dahuasecurity · ipc-hx1xxx firmware · CWE-287 | Критическая9,8 | — | 1,2 % | 13 янв. 2022 г. |
39Наблюдать | CVE-2019-9677Эксплойта нет | The specific fields of CGI interface of some Dahua products are not strictly verified, an attacker can cause a buffer overflow by constructidahuasecurity · ipc-hdw1x2x firmware · CWE-120 | Критическая9,8 | — | 1,1 % | 18 сент. 2019 г. |
39Наблюдать | CVE-2024-39950Эксплойта нет | A vulnerability has been found in Dahua products.dahuasecurity · nvr4104-4ks2\/l firmware · CWE-121 | Критическая9,8 | — | 0,4 % | 31 июл. 2024 г. |
36Наблюдать | CVE-2017-7253Эксплойта нет | Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1.dahuasecurity · ip camera firmware · CWE-922 | Высокая8,8 | — | 2,6 % | 30 мар. 2017 г. |
35Наблюдать | CVE-2017-9317Эксплойта нет | Privilege escalation vulnerability found in some Dahua IP devices.dahuasecurity · xvr5x16 firmware | Высокая8,8 | — | 0,9 % | 23 мая 2018 г. |
35Наблюдать | CVE-2017-9314Эксплойта нет | Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH_NVR5xxx_Eng_P_V2.616.0000.dahuasecurity · nvr5464-16p-4ks2 firmware · CWE-287 | Высокая8,8 | — | 0,9 % | 13 нояб. 2017 г. |
35Наблюдать | CVE-2019-9679Эксплойта нет | Some of Dahua's Debug functions do not have permission separation.dahuasecurity · ipc-hdw1x2x firmware · CWE-276 | Высокая8,8 | — | 0,8 % | 18 сент. 2019 г. |
33Наблюдать | CVE-2013-3615Proof of concept | Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discovdahuasecurity · dvr0404hd-a · CWE-255 | Высокая7,8 | — | 7,6 % | 17 сент. 2013 г. |
33Наблюдать | CVE-2013-3613Proof of concept | Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain access via vectors involvidahuasecurity · dvr0404hd-a · CWE-287 | Высокая7,8 | — | 6,6 % | 17 сент. 2013 г. |
32Наблюдать | CVE-2017-6432Эксплойта нет | An issue was discovered on Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06 devices.dahuasecurity · nvr firmware · CWE-319 | Высокая8,1 | — | 0,9 % | 9 мар. 2017 г. |
32Наблюдать | CVE-2019-9682Эксплойта нет | Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal dahuasecurity · sd6al firmware · CWE-276 | Высокая8,1 | — | 0,8 % | 13 мая 2020 г. |
- CVE-2021-3304499Срочно
The identity authentication bypass vulnerability found in some Dahua products during the login process.
КритическаяCVSS 9,8KEVГотовый эксплойтEPSS 99 %dahuasecurity · ipc-hum7xxx firmware15 сент. 2021 г.
- CVE-2021-3304599Срочно
The identity authentication bypass vulnerability found in some Dahua products during the login process.
КритическаяCVSS 9,8KEVГотовый эксплойтEPSS 99 %dahuasecurity · ipc-hum7xxx firmware15 сент. 2021 г.
- CVE-2023-383661На этой неделе
Dahua Smart Park Management unrestricted upload
КритическаяCVSS 9,8Proof of conceptEPSS 73 %dahuasecurity · smart parking management22 июл. 2023 г.
- CVE-2017-792554В плане
A Password in Configuration File issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-HDW1XXX, DH-IPC-HDW2XXX, DH-I
КритическаяCVSS 9,8Proof of conceptEPSS 51 %dahuasecurity · dh-ipc-hdbw23a0rn-zs firmware5 мая 2017 г.
- CVE-2013-611751В плане
Dahua DVR 2.608.0000.0 and 2.608.GV00.0 allows remote attackers to bypass authentication and obtain sensitive information including user cre
ВысокаяCVSS 7,5Готовый эксплойтEPSS 70 %dahuasecurity · dvr firmware11 июл. 2014 г.
- CVE-2017-634350В плане
The web interface on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-03-29,
ВысокаяCVSS 8,1Эксплойта нетEPSS 60 %dahuasecurity · camera firmware27 февр. 2017 г.
- CVE-2017-634243В плане
An issue was discovered on Dahua DHI-HCVR7216A-S3 devices with NVR Firmware 3.210.0001.10 2016-06-06, Camera Firmware 2.400.0000.28.R 2016-0
КритическаяCVSS 9,8Эксплойта нетEPSS 12 %dahuasecurity · camera firmware27 февр. 2017 г.
- CVE-2013-361243В плане
Dahua DVR appliances have a hardcoded password for (1) the root account and (2) an unspecified "backdoor" account, which makes it easier for
КритическаяCVSS 10,0Proof of conceptEPSS 10 %dahuasecurity · dvr0404hd-a17 сент. 2013 г.
- CVE-2017-322341В плане
Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a sta
КритическаяCVSS 9,8Эксплойта нетEPSS 5 %dahuasecurity · ip camera firmware24 июл. 2018 г.
- CVE-2013-575441В плане
The authorization implementation on Dahua DVR appliances accepts a hash string representing the current date for the role of a master passwo
КритическаяCVSS 10,0Эксплойта нетEPSS 3 %dahuasecurity · dvr0404hd-a17 сент. 2013 г.
- CVE-2017-792740В плане
A Use of Password Hash Instead of Password for Authentication issue was discovered in Dahua DH-IPC-HDBW23A0RN-ZS, DH-IPC-HDBW13A0SN, DH-IPC-
ВысокаяCVSS 7,3Эксплойта нетEPSS 36 %dahuasecurity · dh-ipc-hdbw23a0rn-zs firmware5 мая 2017 г.
- CVE-2013-361439Наблюдать
Dahua DVR appliances have a small value for the maximum password length, which makes it easier for remote attackers to obtain access via a b
КритическаяCVSS 9,3Proof of conceptEPSS 7 %dahuasecurity · dvr0404hd-a17 сент. 2013 г.
- CVE-2020-950239Наблюдать
Some Dahua products with Build time before December 2019 have Session ID predictable vulnerabilities.
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %dahuasecurity · sd6al firmware13 мая 2020 г.
- CVE-2017-931539Наблюдать
Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua autho
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %dahuasecurity · ipc-hfw1xxx firmware28 нояб. 2017 г.
- CVE-2021-3304639Наблюдать
Some Dahua products have access control vulnerability in the password reset process.
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %dahuasecurity · ipc-hx1xxx firmware13 янв. 2022 г.
- CVE-2019-967739Наблюдать
The specific fields of CGI interface of some Dahua products are not strictly verified, an attacker can cause a buffer overflow by constructi
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %dahuasecurity · ipc-hdw1x2x firmware18 сент. 2019 г.
- CVE-2024-3995039Наблюдать
A vulnerability has been found in Dahua products.
КритическаяCVSS 9,8Эксплойта нетEPSS 0 %dahuasecurity · nvr4104-4ks2\/l firmware31 июл. 2024 г.
- CVE-2017-725336Наблюдать
Dahua IP Camera devices 3.200.0001.6 can be exploited via these steps: 1.
ВысокаяCVSS 8,8Эксплойта нетEPSS 2 %dahuasecurity · ip camera firmware30 мар. 2017 г.
- CVE-2017-931735Наблюдать
Privilege escalation vulnerability found in some Dahua IP devices.
ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %dahuasecurity · xvr5x16 firmware23 мая 2018 г.
- CVE-2017-931435Наблюдать
Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH_NVR5xxx_Eng_P_V2.616.0000.
ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %dahuasecurity · nvr5464-16p-4ks2 firmware13 нояб. 2017 г.
- CVE-2019-967935Наблюдать
Some of Dahua's Debug functions do not have permission separation.
ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %dahuasecurity · ipc-hdw1x2x firmware18 сент. 2019 г.
- CVE-2013-361533Наблюдать
Dahua DVR appliances use a password-hash algorithm with a short hash length, which makes it easier for context-dependent attackers to discov
ВысокаяCVSS 7,8Proof of conceptEPSS 7 %dahuasecurity · dvr0404hd-a17 сент. 2013 г.
- CVE-2013-361333Наблюдать
Dahua DVR appliances do not properly restrict UPnP requests, which makes it easier for remote attackers to obtain access via vectors involvi
ВысокаяCVSS 7,8Proof of conceptEPSS 6 %dahuasecurity · dvr0404hd-a17 сент. 2013 г.
- CVE-2017-643232Наблюдать
An issue was discovered on Dahua DHI-HCVR7216A-S3 3.210.0001.10 build 2016-06-06 devices.
ВысокаяCVSS 8,1Эксплойта нетEPSS 0 %dahuasecurity · nvr firmware9 мар. 2017 г.
- CVE-2019-968232Наблюдать
Dahua devices with Build time before December 2019 use strong security login mode by default, but in order to be compatible with the normal
ВысокаяCVSS 8,1Эксплойта нетEPSS 0 %dahuasecurity · sd6al firmware13 мая 2020 г.