MEDIUM🇬🇧 English

CVE-2019-9681

CVSS 5.3v3.1pub. 2019-09-17upd. 2024-11-21

Online upgrade information in some firmware packages of Dahua products is not encrypted. Attackers can obtain this information by analyzing firmware packages by specific means. Affected products include: IPC-HDW1X2X,IPC-HFW1X2X,IPC-HDW2X2X,IPC-HFW2X2X,IPC-HDW4X2X,IPC-HFW4X2X,IPC-HDBW4X2X,IPC-HDW5X2X,IPC-HFW5X2X for versions which Build time is before August 18,2019.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

  • Dahuasecurity Ipc Hdbw4x2x

    HW
    Dahuasecurity
    wszystkie wersje

  • Dahuasecurity Ipc Hdbw4x2x Firmware

    OS
    Dahuasecurity
    < 2019-08-18

  • Dahuasecurity Ipc Hdw1x2x

    HW
    Dahuasecurity
    wszystkie wersje

  • Dahuasecurity Ipc Hdw1x2x Firmware

    OS
    Dahuasecurity
    < 2019-08-18

  • Dahuasecurity Ipc Hdw2x2x

    HW
    Dahuasecurity
    wszystkie wersje

  • Dahuasecurity Ipc Hdw2x2x Firmware

    OS
    Dahuasecurity
    < 2019-08-18

  • Dahuasecurity Ipc Hdw4x2x

    HW
    Dahuasecurity
    wszystkie wersje

  • Dahuasecurity Ipc Hdw4x2x Firmware

    OS
    Dahuasecurity
    < 2019-08-18

  • Dahuasecurity Ipc Hdw5x2x

    HW
    Dahuasecurity
    wszystkie wersje

  • Dahuasecurity Ipc Hdw5x2x Firmware

    OS
    Dahuasecurity
    < 2019-08-18

  • Dahuasecurity Ipc Hfw1x2x

    HW
    Dahuasecurity
    wszystkie wersje

  • Dahuasecurity Ipc Hfw1x2x Firmware

    OS
    Dahuasecurity
    < 2019-08-18

  • Dahuasecurity Ipc Hfw2x2x

    HW
    Dahuasecurity
    wszystkie wersje

  • Dahuasecurity Ipc Hfw2x2x Firmware

    OS
    Dahuasecurity
    < 2019-08-18

  • Dahuasecurity Ipc Hfw4x2x

    HW
    Dahuasecurity
    wszystkie wersje

  • Dahuasecurity Ipc Hfw4x2x Firmware

    OS
    Dahuasecurity
    < 2019-08-18

  • Dahuasecurity Ipc Hfw5x2x

    HW
    Dahuasecurity
    wszystkie wersje

  • Dahuasecurity Ipc Hfw5x2x Firmware

    OS
    Dahuasecurity
    < 2019-08-18
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2019-9677CRITICAL9.8PL ✓ten sam produkt

Buffer overflow w interfejsie CGI kamer IP Dahua

CVE-2019-9678HIGH7.5ten sam produkt

Some Dahua products have the problem of denial of service during the login process. An attacker can cause a de...

CVE-2019-9679HIGH8.8ten sam produkt

Some of Dahua's Debug functions do not have permission separation. Low-privileged users can use the Debug func...

CVE-2019-9680MEDIUM5.3ten sam produkt

Some Dahua products have information leakage issues. Attackers can obtain the IP address and device model info...

CVE-2021-33044CRITICAL9.8⚠ KEVPL ✓ten sam vendor

Pominięcie uwierzytelnienia w urządzeniach Dahua podczas logowania